Re: pf match ipv6 interface ID
Sonic <[email protected]> Mon, 29 Jun 2026 23:03:15 -0400
| Newsgroups | gmane.os.openbsd.misc |
|---|---|
| Message-ID | <CAP5+4qe3kOHWdcgtnVaaOupv7t7xBZrCNioY=zE+NZnSD4v=8w@mail.gmail.com> |
On Mon, Jun 29, 2026 at 10:49 PM Jason Tubnor <[email protected]> wrote: > While I object to ISPs playing IPv4 games with IPv6 and not provide sticky GUA subnets, I think your only option here is ULA (fc00::/7) and do NAT based on service. I can't see how PF could be coded to pass on host suffix alone. Some sort of bitmask should work. I thought I read about other OS's being able to handle this, maybe one of the "Senses", but I didn't look into it and it may just be a dream or a rumor.