Re: Ipv6 router, I cannot manage to get router messages through

"Brian Conway" <[email protected]> Sat, 13 Jun 2026 22:26:47 -0500
Newsgroups gmane.os.openbsd.misc
Message-ID <[email protected]>
On Sat, Jun 13, 2026, at 5:02 PM, Noth wrote:
> antispoof shouldn't be applied to local interfaces, only egress.
>

Negative, regarding egress only. Antispoof is a simple helper that expands to two rules that make sense for external or internal interfaces. The PF User's Guide router example does exactly that:

https://www.openbsd.org/faq/pf/example1.html#pf

Agreed it is likely superfluous for lo0.

Brian Conway