From owner-freebsd-pf@freebsd.org Tue Oct 10 16:38:09 2017 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A8B87E36DAF for ; Tue, 10 Oct 2017 16:38:09 +0000 (UTC) (envelope-from list+org.freebsd.pf@io7m.com) Received: from mail.io7m.com (mail.io7m.com [IPv6:2001:19f0:5:752:f000::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.io7m.com", Issuer "arc7 CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8A06E63584 for ; Tue, 10 Oct 2017 16:38:09 +0000 (UTC) (envelope-from list+org.freebsd.pf@io7m.com) Received: from copperhead.int.arc7.info (unknown [IPv6:2a02:390:7502:2:0:2:1:0]) by mail.io7m.com (Postfix) with ESMTPSA id 1E77683F8 for ; Tue, 10 Oct 2017 16:38:01 +0000 (UTC) Date: Tue, 10 Oct 2017 16:38:03 +0000 From: Mark Raynsford To: freebsd-pf@freebsd.org Subject: Re: Specifying a range of ipv6 addresses? Message-ID: <20171010163736.7bfd6094@copperhead.int.arc7.info> In-Reply-To: <20171010161123.52808204@copperhead.int.arc7.info> References: <20171010161123.52808204@copperhead.int.arc7.info> Organization: io7m.com OpenPGP: id=8168DAE22B15D3EDC722C23D0F15B7D06FA80CB8; url=http://io7m.com/pgp/8168_DAE2_2B15_D3ED_C722_C23D_0F15_B7D0_6FA8_0CB8.key MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 16:38:09 -0000 On 2017-10-10T16:11:23 +0000 Mark Raynsford wrote: > Hello. > > What is the syntax for specifying a range of IPv6 addresses in rules? Naturally, I didn't find the answer until I asked the question. The syntax I was looking for is: pass out log quick on $nic_ppp inet6 proto tcp \ from 2001:db8:8:10:: - 2001:db8:8:10:ffff:ffff:ffff:ffff \ to any port 80 modulate state -- Mark Raynsford | http://www.io7m.com