Re: Autoconfigure vs. Static Addressing
eric <[email protected]> Thu, 17 Mar 2005 22:58:52 -0600
| Newsgroups | gmane.os.openbsd.ipv6 |
|---|---|
| Organization | Catastrophe.Net <http://www.catastrophe.net/> |
| Message-ID | <[email protected]> |
On Fri, 2005-03-18 at 05:34:19 +0100, Alexandre Anriot proclaimed... > $ cat /etc/hostname.fxp0 > inet 10.19.81.180 255.255.255.128 NONE > rtsol That works great, thank you. Are there any tricks to getting pf to work? I keep getting this (as posted on misc@...) Mar 17 17:38:02.441219 rule 12/0(match): block in on fxp0: fe80::2e0:1eff:fef7:bc40 > 2001:468:1202:301:203:47ff:fea4:3e12: [|icmp6] [class 0xe0] (len 32, hlim 255) Seems like it happens anytime I try and make an outbound connection. I'm still new to ipv6, so please don't shoot me too many times! Here's my pf.conf... @0 pass quick on lo0 all @1 pass out quick on fxp0 inet proto tcp all flags S/SA modulate state @2 pass out quick on fxp0 inet proto tcp all keep state @3 pass out quick on fxp0 inet proto udp all keep state @4 pass out quick on fxp0 inet proto icmp all keep state @5 pass out quick on fxp0 inet6 proto tcp all flags S/SA modulate state @6 pass out quick on fxp0 inet6 proto tcp all keep state @7 pass out quick on fxp0 inet6 proto udp all keep state @8 pass out quick on fxp0 inet6 proto ipv6-icmp all keep state @9 pass out quick on fxp0 all @10 block return-rst log proto tcp all flags /S @11 block return-rst log proto tcp all flags A/A @12 block return log all @13 block return in quick on fxp0 from <bogon:10> to any @14 block return in quick on fxp0 inet from any to 255.255.255.255 @15 block return out log quick on fxp0 inet from ! 10.19.81.180 to any @16 block drop in log on ! fxp0 inet6 from 2001:468:1202:301::/64 to any @17 block drop in log on ! fxp0 inet from 10.19.81.128/25 to any @18 block drop in log on fxp0 inet6 from fe80::203:47ff:fea4:3e12 to any @19 block drop in log inet6 from 2001:468:1202:301:203:47ff:fea4:3e12 to any @20 block drop in log inet from 10.19.81.180 to any Thank you again.