Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Nov 2019 18:46:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 242201] ipfw - option 'ipversion 6' not working
Message-ID:  <bug-242201-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D242201

            Bug ID: 242201
           Summary: ipfw - option 'ipversion 6' not working
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: dsx@bsdsx.fr

>From man ipfw:

...
   RULE OPTIONS (MATCH PATTERNS)
...
     ipversion ver
             Matches IP packets whose IP version field is ver.

This option add opcode 'O_IPVER'.

>From sys/netpfil/ipfw/ip_fw2.c:

...
    case O_IPVER:
            match =3D (is_ipv4 && (cmd->arg1 =3D=3D ip->ip_v));
            break;
...

Flag 'is_ipv4' (may be a copy/paste from another case) must not be used in =
this
case.

Without this flag, i can use the following rule to match ipv6 icmp packet:

/sbin/ipfw add pass log ipversion 6 proto ipv6-icmp


Regards,

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-242201-227>