Re: Autoconfigure vs. Static Addressing

eric <[email protected]> Thu, 17 Mar 2005 22:58:52 -0600
Newsgroups gmane.os.openbsd.ipv6
Organization Catastrophe.Net <http://www.catastrophe.net/>
Message-ID <[email protected]>
On Fri, 2005-03-18 at 05:34:19 +0100, Alexandre Anriot proclaimed...

> $ cat /etc/hostname.fxp0
> inet 10.19.81.180 255.255.255.128 NONE 
> rtsol

That works great, thank you.

Are there any tricks to getting pf to work? I keep getting this (as posted
on misc@...)

Mar 17 17:38:02.441219 rule 12/0(match): block in on fxp0:
fe80::2e0:1eff:fef7:bc40 > 2001:468:1202:301:203:47ff:fea4:3e12: [|icmp6]
[class 0xe0] (len 32, hlim 255)

Seems like it happens anytime I try and make an outbound connection. I'm
still new to ipv6, so please don't shoot me too many times!

Here's my pf.conf...

@0 pass quick on lo0 all
@1 pass out quick on fxp0 inet proto tcp all flags S/SA modulate state
@2 pass out quick on fxp0 inet proto tcp all keep state
@3 pass out quick on fxp0 inet proto udp all keep state
@4 pass out quick on fxp0 inet proto icmp all keep state
@5 pass out quick on fxp0 inet6 proto tcp all flags S/SA modulate state
@6 pass out quick on fxp0 inet6 proto tcp all keep state
@7 pass out quick on fxp0 inet6 proto udp all keep state
@8 pass out quick on fxp0 inet6 proto ipv6-icmp all keep state
@9 pass out quick on fxp0 all
@10 block return-rst log proto tcp all flags /S
@11 block return-rst log proto tcp all flags A/A
@12 block return log all
@13 block return in quick on fxp0 from <bogon:10> to any
@14 block return in quick on fxp0 inet from any to 255.255.255.255
@15 block return out log quick on fxp0 inet from ! 10.19.81.180 to any
@16 block drop in log on ! fxp0 inet6 from 2001:468:1202:301::/64 to any
@17 block drop in log on ! fxp0 inet from 10.19.81.128/25 to any
@18 block drop in log on fxp0 inet6 from fe80::203:47ff:fea4:3e12 to any
@19 block drop in log inet6 from 2001:468:1202:301:203:47ff:fea4:3e12 to any
@20 block drop in log inet from 10.19.81.180 to any

Thank you again.