pf: IPv6 stateful forwarding is broken

To: tech-net%netbsd.org@localhost
Subject: pf: IPv6 stateful forwarding is broken
From: Egerváry Gergely <gergely%egervary.hu@localhost>
Date: Mon, 26 Dec 2016 02:06:08 +0100

Hi,

I'm running NetBSD 6-STABLE with pf on a dual-stack gateway.

- with no pf rules, IPv6 forwarding is OK.
- with a single "pass all no state" rule IPv6 forwarding is still OK.
- but with a single "pass all" rule IPv4 works as expected, but TCP
sessions over IPv6 are broken.

I have found this bug in gnats - looks similar:
  http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=47001

Does it have a fix in 7-STABLE or -CURRENT?

Thank you very much
--
Gergely EGERVARY

Prev by Date: Re: Howto use agr to aggregate VPN tunnels
Next by Date: ipfilter: keep state per-interface?
Previous by Thread: Howto use agr to aggregate VPN tunnels
Next by Thread: ipfilter: keep state per-interface?
Indexes:

Home | Main Index | Thread Index | Old Index