[Bug 242201] ipfw - option 'ipversion 6' not working

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242201

            Bug ID: 242201
           Summary: ipfw - option 'ipversion 6' not working
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs at FreeBSD.org
          Reporter: dsx at bsdsx.fr

>From man ipfw:

...
   RULE OPTIONS (MATCH PATTERNS)
...
     ipversion ver
             Matches IP packets whose IP version field is ver.

This option add opcode 'O_IPVER'.

>From sys/netpfil/ipfw/ip_fw2.c:

...
    case O_IPVER:
            match = (is_ipv4 && (cmd->arg1 == ip->ip_v));
            break;
...

Flag 'is_ipv4' (may be a copy/paste from another case) must not be used in this
case.

Without this flag, i can use the following rule to match ipv6 icmp packet:

/sbin/ipfw add pass log ipversion 6 proto ipv6-icmp


Regards,

-- 
You are receiving this mail because:
You are the assignee for the bug.