Displaying 1 result from an estimated 1 matches for "ipv4_address_of_external_interface".
2007 Jun 13
0
pf does not use IPv6 interface addresses at startups
...The pf firewall does not use the IPv6 addresses at startups.
If you start using pf firewall with IPv6 enabled the IPv6 addressess
are not used:
e.g.
in case of pf rule:
pass out quick proto tcp from $ext_if to any keep state
the real rule will be:
pass out quick inet proto tcp from "IPv4_ADDRESS_OF_EXTERNAL_INTERFACE" to any keep state
the IPv6 address of the external did not take into consideration since
IPv6 address not configured yet.
>How-To-Repeat:
Try using interface names with ipv6 enabled in pf firewall.
>Fix:
1.
Start network_ipv6 before pf in /etc/rc.d.
mohacsi@mignon2> diff -...