On Fri, 17 Nov 2006 16:02:31 -0600, David Young <dyoung@pobox.com> wrote:

> The departure of IPv6 interfaces does not agree with pf.  The pfil hooks
> that signal the interface's departure run before IPv6 sends messages
> to indicate that it is leaving its multicast groups; when pf filters
> the departure messages, it does not recognize the output interface,
> so it complains at the departure of gre65, for example:
> 
> pf_test6: kif == NULL, if_xname gre65

That works in v4, at least with no multicast running.  I use pf filters
for ppp interfaces; I see the message but no further trouble when pppd
ends.


		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb