nat64

Hello !

I am trying to setup a nat64 using my openbsd server as router.

This server has one physical network card (re0).
I connect it to native ipv6 world with a sixxs tunnel, and my local 
network get ipv6 connectivity. So, no problem connerning that.

I would like to finish the damn thing (like said previously) by 
furnishing a nat64 on this system. I tried to find the good pf rule, 
but can't understand how to build it.

here is what I would like to write (or close) :

pass in on re0 inet6 from any to 64:ff9b::/96 af-to inet from (re0)

Here is my config (I supress loopback and log interface, but they are 
active obviously) :

# ifconfig                                                                                                                                                                                                
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr bc:5f:f4:73:a7:e0
        priority: 0
        groups: egress
        media: Ethernet autoselect (1000baseT full-
duplex,rxpause,txpause)
        status: active
        inet6 fe80::be5f:f4ff:fe73:a7e0%re0 prefixlen 64 scopeid 0x1
        inet6 2001:16d8:dd00:8207::2 prefixlen 64
        inet6 2001:16d8:dd00:8207:be5f:f4ff:fe73:a7e0 prefixlen 64
        inet6 2001:16d8:dd00:8207:be5f:f4ff:fe73:a7e0 prefixlen 64
        inet 192.168.87.2 netmask 0xffffff00 broadcast 192.168.87.255
        inet6 2001:16d8:dd00:8207:8ce:b9a4:3069:1905 prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 76312
        inet6 2001:16d8:dd00:8207:c425:547e:727:2bed prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 162543
        inet6 2001:16d8:dd00:8207:7c7a:4871:52ad:fb96 prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 248751
        inet6 2001:16d8:dd00:8207:49e:db9d:70e1:32a prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 335038
        inet6 2001:16d8:dd00:8207:4cdc:5c4:8c74:464e prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 421585
        inet6 2001:16d8:dd00:8207:fc2b:59a0:dbf3:e362 prefixlen 64 
deprecated autoconf autoconfprivacy pltime 0 vltime 508014
enc0: flags=0<>
        priority: 0
        groups: enc
        status: active
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
        priority: 0
        groups: tun egress
        status: active
        inet6 fe80::be5f:f4ff:fe73:a7e0%tun0 ->  prefixlen 64 scopeid 
0x5
        inet6 fe80::14d8:dd00:207:2%tun0 ->  prefixlen 64 scopeid 0x5
        inet6 2001:16d8:dd00:207::2 -> 2001:16d8:dd00:207::1 prefixlen 
128

Thanks in advance for your suggestions.

[demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]