From owner-freebsd-bugs@FreeBSD.ORG Wed Jul 26 11:40:15 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7C63816A4E1 for ; Wed, 26 Jul 2006 11:40:15 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id C99AF43D53 for ; Wed, 26 Jul 2006 11:40:14 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k6QBeERn088658 for ; Wed, 26 Jul 2006 11:40:14 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k6QBeEus088653; Wed, 26 Jul 2006 11:40:14 GMT (envelope-from gnats) Resent-Date: Wed, 26 Jul 2006 11:40:14 GMT Resent-Message-Id: <200607261140.k6QBeEus088653@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Remko Catersels Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BF5DF16A4DD for ; Wed, 26 Jul 2006 11:33:25 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 90D5F43D46 for ; Wed, 26 Jul 2006 11:33:25 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id k6QBXPmF069049 for ; Wed, 26 Jul 2006 11:33:25 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id k6QBXPk7069048; Wed, 26 Jul 2006 11:33:25 GMT (envelope-from nobody) Message-Id: <200607261133.k6QBXPk7069048@www.freebsd.org> Date: Wed, 26 Jul 2006 11:33:25 GMT From: Remko Catersels To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: misc/100879: PF on Freebsd 6.1-STABLE doesn't block IPv6 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Jul 2006 11:40:15 -0000 >Number: 100879 >Category: misc >Synopsis: PF on Freebsd 6.1-STABLE doesn't block IPv6 >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Jul 26 11:40:14 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Remko Catersels >Release: 6.1-STABLE >Organization: >Environment: FreeBSD maelcum.w2k.home 6.1-STABLE FreeBSD 6.1-STABLE #12: Sun Jul 23 22:42:01 CEST 2006 root@molly.w2k.home:/usr/obj/usr/src/sys/MAELCUM i386 >Description: Compiled a kernel with INET6 support. Added device pf and pflog. Configured IPv6 using a tunnel broker supplied by my ISP. IPv6 fully functional. Internal machines all have a global IPv6 address. Added a block in on $ext_if inet6 from any to any. Reloaded pf.conf. I can still ping all the machines behind the firewall via IPv6. $ext_if="rl1" $int_if="rl0" >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: