Re: pf/pfctl loading CIDR tables & IPv6

"J. Hellenthal via freebsd-security" <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Message-ID <[email protected]>
I should also note here that after modifying the file and removing the offending information there was also another error where “/“ character was being tested and failed for IPv6 but I do not have that error available ATM.

> On Nov 14, 2020, at 10:58, J. Hellenthal <[email protected]> wrote:
> 
> Hello List!
> 
> Hoping someone might be able to shed some light on this and get to a conclusion faster than I have time for right now.
> 
> 
> But while loading a CIDR formatted list with ‘#’ comments from [1] I am getting the following error for multiple entries >10 and results in the only the partial list being loaded into the table… The settings to download the file[2] are from the Russian Federation, IPv6 and in CIDR format.
> 
> “ (pfctl -v -t blacklist -T add -f […]
> No ALTQ support in kernel
> ALTQ related functions disabled
> no IP address found for 2001:BB6:6A10:4200:58D7:5934:7
> pfctl: cannot load Downloads/cidr-3ffe1c0826f41fbdced334355b66202c.txt: Undefined error: 0
> "
> 
> This happens both on FreeBSD 12-STABLE r367639 and the latest macOS Big Sur
> 
> 1. https://www.ip2location.com/free/visitor-blocker
> 2. https://www.dropbox.com/s/8efctv56j6ocrbv/Screen%20Shot%202020-11-14%20at%2010.52.07.png?dl=0
> 
> 
> Appreciate any feedback on this and willing to test any patches to resolve this situation.
> 
> 
> Thank you
> 
> -- 
> 
> J. Hellenthal
> 
> The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
> 
> 
> 
> 
> 
> 


-- 

J. Hellenthal

The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.






_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.