Re: npf over ipv6

Michael van Elst writes:
> [email protected] (=?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?=) writes:
> 
>> |         pass stateful in final family inet6 proto tcp flags S/FSRA to
>> { fe80:1::ec4:7aff:fe0d:b158, 2001:bc8:1200:d:ec4:7aff:fe0d:b158 } port
>> 22 # id="4"
> 
> That's probably bin/55403.

The problem seems more complicated.

I have now:

| kyroz# npfctl show
| # filtering:    active
| # config:       loaded
|
| procedure "log"
|
| group default { # id="1"
|         pass stateful out final all # id="2"
|         pass stateful in final family inet4 proto tcp flags S/FSRA to 
51.159.70.149 port 22 # id="3"
|         pass stateful in final family inet6 proto tcp flags S/FSRA to 
2001:bc8:1200:d:ec4:7aff:fe0d:b158 port 22 # id="4"
|         pass final on lo0 all # id="5"
|         block all apply "log" # id="6"
| }

But

| uzqew% ssh -6 kyroz.triaxx.org
| ssh: connect to host kyroz.triaxx.org port 22: Operation timed out