kern/170604: [ipfw] ipv6 reass broken

Freek Dijkstra public at
Mon Aug 13 12:50:01 UTC 2012

>Number:         170604
>Category:       kern
>Synopsis:       [ipfw] ipv6 reass broken
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 13 12:50:01 UTC 2012
>Originator:     Freek Dijkstra
>Release:        9.0-RELEASE
FreeBSD 9.0-RELEASE FreeBSD 9.0-RELEASE #0: Tue Jan  3 07:15:25 UTC 2012     root at  i386
Packet reassembly is only implemented for IPv4, not for IPv6. This is a request to:
* Support IPv6 packet reassembly with the "reass" command in ipfw.
* Update the documentation and/or ignore the ip6 reass command (to avoid someone bricking a device) in the mean time

Notes: I presume this is the same problem as reported earlier by someone else on the freebsd-ipfw list:

The bug report/feature request is meant to keep track of that issue.
Steps to reproduce:
1. Add the following rules to ipfw:
# sysctl net.inet.ip.fw.one_pass=0
# ipfw add 100 reass ipv6 from any to any in
2. Try to connect to the device (with any means, e.g. ssh over either IPv4 or IPv6)

Expected result:
I expect the device to be reachable

Actual result:
I bricked my device



More information about the freebsd-bugs mailing list