"reass all from any to any" kills IPv6 packets

Andrey V. Elsukov bu7cher at yandex.ru
Thu Mar 5 16:13:14 UTC 2015


On 05.03.2015 18:26, Emil Muratov wrote:
> On 03.02.2015 13:42, Lev Serebryakov wrote:
>>
>>  Recommended "reass all from any to any in" kills all incoming IPv6
>> packets (at least, packets from 6in4 tunnel). "reass ip4 from any to
>> any in" works as expected.
>>
>>  Is it documentation bug or implementation bug?
> 
> Both :) Hit this bug several years ago, seems it is still here

AFAIR, I made the patch for such PR, but nobody wanted to test it :)
	https://people.freebsd.org/~ae/ipfw_ip6reass.diff

Probably now I can test it myself a bit later.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 538 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20150305/3553bec4/attachment.sig>


More information about the freebsd-ipfw mailing list