Re: rule for any IPv6 address
"Dan Mahoney (ports)" <[email protected]> Sun, 19 Apr 2026 13:06:41 -0700
| Newsgroups | gmane.os.freebsd.devel.ipfw |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail=_AF0942F0-BB82-4E82-B158-7927A3F87BAF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Whoops, sent from wrong address. > On Apr 19, 2026, at 3:07=E2=80=AFAM, Marco Moock <[email protected]> = wrote: >=20 > Hello! >=20 > # ipfw add 01000 allow tcp from ::/0 to me 80 > 01000 allow tcp from me6 to me 80 # ipfw add 65500 allow ip6 from any to me 80 proto tcp 65500 allow ip6 from any to me6 80 proto tcp note that the kernel then interprets me as "me6" since it knows it's an = ipv6 me. Yeah, it might be useful if there was aliases for: allow tcp6 from any to me, that under the hood got rendered as: allow ip6 from any to me6 proto tcp But yeah, this seems to be The Way. Also note that while reading the manpage for this, I found a weird = mention of "inner" protocols that I pushed a docbug for. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D294648= --Apple-Mail=_AF0942F0-BB82-4E82-B158-7927A3F87BAF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html aria-label=3D"message body"><head><meta http-equiv=3D"content-type" = content=3D"text/html; charset=3Dutf-8"></head><body = style=3D"overflow-wrap: break-word; -webkit-nbsp-mode: space; = line-break: after-white-space;">Whoops, sent from wrong = address.<div><div><br><blockquote type=3D"cite"><div>On Apr 19, 2026, at = 3:07=E2=80=AFAM, Marco Moock <[email protected]> wrote:</div><br = class=3D"Apple-interchange-newline"><div><div>Hello!<br><br># ipfw add = 01000 allow tcp from ::/0 to me 80<br>01000 allow tcp from me6 to me = 80</div></div></blockquote></div></div><div><div><br></div><div># ipfw = add 65500 allow ip6 from any to me 80 proto tcp</div><div>65500 allow = ip6 from any to me6 80 proto tcp</div><div><br></div><div>note that the = kernel then interprets me as "me6" since it knows it's an ipv6 = me.</div><div><br></div><div>Yeah, it might be useful if there was = aliases for:</div><div><br></div><div>allow tcp6 from any to me, that = under the hood got rendered as:</div><div><br></div><div>allow ip6 from = any to me6 proto tcp</div><div><br></div><div>But yeah, this seems to be = The Way.</div><div><br></div><div>Also note that while reading the = manpage for this, I found a weird mention of "inner" protocols that I = pushed a docbug for.</div><div><br></div><div><a = href=3D"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D294648">https:= //bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D294648</a></div></div></body= ></html>= --Apple-Mail=_AF0942F0-BB82-4E82-B158-7927A3F87BAF--