Aw: PF IPv6 fragment support

Thomas Steen Rasmussen thomas at gibfest.dk
Fri Apr 26 15:05:25 UTC 2013


On 26-04-2013 10:26, Rainer Bredehorn wrote:
>> I'm using FreeBSD 8.3 which doesn't support IPv6 fragments in PF.
>> Does FreeBSD 9.x PF support IPv6 fragments?
>> I can't find it in the 9.0 or 9.1 manpages. For pf.conf they are the same as in FreeBSD 8.3.
> I've modified the kernel PF implementation to pass IPv6 fragments.
> The first fragment is handled by the PF rules of course ignoring possible checksums.
> All other fragments are passed by PF to the IP stack.
> This can be done state-full but reassembling fragments is not supported.
>
> That's what I wanted.
>
> Rainer.

Care to share ? :)

/Thomas



More information about the freebsd-net mailing list