On Fri, 2005-03-18 at 05:34:19 +0100, Alexandre Anriot proclaimed...That works great, thank you. Are there any tricks to getting pf to work? I keep getting this (as posted on misc@...) Mar 17 17:38:02.441219 rule 12/0(match): block in on fxp0: fe80::2e0:1eff:fef7:bc40 > 2001:468:1202:301:203:47ff:fea4:3e12: [|icmp6] [class 0xe0] (len 32, hlim 255) Seems like it happens anytime I try and make an outbound connection. I'm still new to ipv6, so please don't shoot me too many times! Here's my pf.conf... @0 pass quick on lo0 all @1 pass out quick on fxp0 inet proto tcp all flags S/SA modulate state @2 pass out quick on fxp0 inet proto tcp all keep state @3 pass out quick on fxp0 inet proto udp all keep state @4 pass out quick on fxp0 inet proto icmp all keep state @5 pass out quick on fxp0 inet6 proto tcp all flags S/SA modulate state @6 pass out quick on fxp0 inet6 proto tcp all keep state @7 pass out quick on fxp0 inet6 proto udp all keep state @8 pass out quick on fxp0 inet6 proto ipv6-icmp all keep state @9 pass out quick on fxp0 all @10 block return-rst log proto tcp all flags /S @11 block return-rst log proto tcp all flags A/A @12 block return log all @13 block return in quick on fxp0 from <bogon:10> to any @14 block return in quick on fxp0 inet from any to 255.255.255.255 @15 block return out log quick on fxp0 inet from ! 10.19.81.180 to any @16 block drop in log on ! fxp0 inet6 from 2001:468:1202:301::/64 to any @17 block drop in log on ! fxp0 inet from 10.19.81.128/25 to any @18 block drop in log on fxp0 inet6 from fe80::203:47ff:fea4:3e12 to any @19 block drop in log inet6 from 2001:468:1202:301:203:47ff:fea4:3e12 to any @20 block drop in log inet from 10.19.81.180 to any Thank you again.
| David Newall | Re: Slow DOWN, please!!! |
| Renato S. Yamane | Error -71 on device descriptor read/all |
| Greg Kroah-Hartman | [PATCH 004/196] Chinese: add translation of SubmittingPatches |
| Bart Van Assche | Integration of SCST in the mainstream Linux kernel |
git: | |
| Shawn O. Pearce | libgit2 - a true git library |
| Martin Langhoff | Re: pack operation is thrashing my server |
| Aubrey Li | git proxy issue |
| Pierre Habouzit | git send-email improvements |
| Elad Efrat | Integrating securelevel and kauth(9) |
| Hubert Feyrer | Compressed vnd handling tested successfully |
| Matt Thomas | Interrupt, interrupt threads, continuations, and kernel lwps |
| Michael | Re: yamt-km branch |
| Richard Stallman | Real men don't attack straw men |
| Will Maier | cron doesn't run commands in /etc/crontab? |
| askthelist | Packets Per Second Limit? |
| Harald Dunkel | Packet Filter: how to keep device names on hardware failure? |
| Question on swap as ramdisk partition | 2 hours ago | Linux kernel |
| Netfilter kernel module | 12 hours ago | Linux kernel |
| serial driver xmit problem | 15 hours ago | Linux kernel |
| Why Windows is better than Linux | 15 hours ago | Linux general |
| How can I see my kernel messages in vt12? | 22 hours ago | Linux kernel |
| Grub | 1 day ago | Linux general |
| vmalloc_fault handling in x86_64 | 1 day ago | Linux kernel |
| epoll_wait()ing on epoll FD | 1 day ago | Linux kernel |
| Framebuffer in x86_64 causes problems to multiseat | 2 days ago | Linux kernel |
| Difference between 2.4 and 2.6 regarding thread creation | 2 days ago | Linux general |
