On Sun, May 23, 2010 at 07:15:07PM -0700, TimH wrote:
quoted text
> I have tried a number of ways to allow icmp6, as the notes in my
> pf.conf (look for #####) explain below.  What few examples I could find
> online (http://www.benzedrine.cx/pf.conf) seemed to suggest it
> shouldn't be hard, but I'm not having any success.  Is anyone doing
> this with 4.7?
> ##### I have tried all three of these to no effect
> #pass on $tunnel_if inet6 proto ipv6-icmp
> #pass in on $tunnel_if inet6 proto ipv6-icmp from any to $ipv6_net
> #pass quick proto icmp6 all

How about the following?

  pass in quick proto ipv6-icmp

--
Olivier Mehani <shtrom@ssji.net>
PGP fingerprint: 4435 CF6A 7C8D DD9B E2DE  F5F9 F012 A6E2 98C6 6655

[demime 1.01d removed an attachment of type application/pgp-signature]