FreeBSD 12, pf, and Dual IP stack?

Kurt Jaeger pi at freebsd.org
Tue Jun 4 17:54:44 UTC 2019


Hi!

> I'm running a vps running FreeBSD 12 with pf as firewall. I've got a
> public ipv4 and a public ipv6 address, the latter is not going through
> a tunnel broker.
> 
> I can not wrap my head around ipv6 probably because I'm use to decimal
> representations and ipv4 addressing. If anyone has a primer I would
> welcome it.
> 
> With regards ipv6 I don't know if my address gives me one address or a
> range?

It gives you one IPv6 address, not a range.

But as the netmask is /64, you can add quite a few ipv6 interface
aliases to play with.

> If a range what I'm wanting to do is assign that range to jails
> running on a cloned interface lo1 so that each of them can have their
> own ipv6 as well as natted ipv4 addresses.

Yes, that might work.

-- 
pi at opsec.eu            +49 171 3101372                    One year to go !


More information about the freebsd-pf mailing list