Issue #3085 has been updated by sepherosa.
I will take care of this patch.
On Sat, Oct 21, 2017 at 2:38 PM,
<bugtracker-admin@leaf.dragonflybsd.org> wrote:
Issue #3085 has been reported by liweitianux.
----------------------------------------
Submit #3085: [PATCH] pf(4): Bring some IPv6-related fixes from OpenBSD
http://bugs.dragonflybsd.org/issues/3085
- Author: liweitianux
- Status: New
- Priority: Normal
- Assignee:
- Category: PF
- Target version:
----------------------------------------
Hello,
The attached patch contains the following 3 commits that I brought from OpenBSD:
1. pf: use IN6_IS_SCOPE_EMBED to check kernel-internal form addresses
2. pf: Always skip "urpf-failed" test for IPv6 link local addresses
3. pf: Make pf_print_host() print IPv6 addresses correctly
The second commit fixes the "uprf-failed" issue on IPv6 that I shared on the mailing list some time ago [1]. With this fix, the "urpf-failed" rule can just be enabled on both IPv4 and IPv6.
Credit to Marcin Wisnicki, who pointed out the problem and gave fixes to it [2].
[1] http://lists.dragonflybsd.org/pipermail/users/2017-August/313577.html
[2] https://lists.freebsd.org/pipermail/freebsd-pf/2010-July/005724.html
Cheers,
Aly
---Files--------------------------------
pf-inet6.patch (3.73 KB)
--
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account
--
Tomorrow Will Never Die
----------------------------------------
Submit #3085: [PATCH] pf(4): Bring some IPv6-related fixes from OpenBSD
http://bugs.dragonflybsd.org/issues/3085#change-13276
- Author: liweitianux
- Status: New
- Priority: Normal
- Assignee:
- Category: PF
- Target version:
----------------------------------------
Hello,
The attached patch contains the following 3 commits that I brought from OpenBSD:
1. pf: use IN6_IS_SCOPE_EMBED to check kernel-internal form addresses
2. pf: Always skip "urpf-failed" test for IPv6 link local addresses
3. pf: Make pf_print_host() print IPv6 addresses correctly
The second commit fixes the "uprf-failed" issue on IPv6 that I shared on the mailing list some time ago [1]. With this fix, the "urpf-failed" rule can just be enabled on both IPv4 and IPv6.
Credit to Marcin Wisnicki, who pointed out the problem and gave fixes to it [2].
[1] http://lists.dragonflybsd.org/pipermail/users/2017-August/313577.html
[2] https://lists.freebsd.org/pipermail/freebsd-pf/2010-July/005724.html
Cheers,
Aly
---Files--------------------------------
pf-inet6.patch (3.73 KB)
--
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account
Updated by 
Updated by