misc/100879: PF on Freebsd 6.1-STABLE doesn't block IPv6
Remko Catersels
sirdice at xs4all.nl
Wed Jul 26 11:40:15 UTC 2006
>Number: 100879
>Category: misc
>Synopsis: PF on Freebsd 6.1-STABLE doesn't block IPv6
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Wed Jul 26 11:40:14 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Remko Catersels
>Release: 6.1-STABLE
>Organization:
>Environment:
FreeBSD maelcum.w2k.home 6.1-STABLE FreeBSD 6.1-STABLE #12: Sun Jul 23 22:42:01 CEST 2006 root at molly.w2k.home:/usr/obj/usr/src/sys/MAELCUM i386
>Description:
Compiled a kernel with INET6 support. Added device pf and pflog. Configured IPv6 using a tunnel broker supplied by my ISP. IPv6 fully functional. Internal machines all have a global IPv6 address. Added a block in on $ext_if inet6 from any to any. Reloaded pf.conf. I can still ping all the machines behind the firewall via IPv6.
$ext_if="rl1"
$int_if="rl0"
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-bugs
mailing list