[DragonFlyBSD - Bug #3342] (New) [PF] urpf-failed doesn't work with IPv6

bugtracker-admin at leaf.dragonflybsd.org bugtracker-admin at leaf.dragonflybsd.org
Mon Feb 6 00:55:53 PST 2023


Issue #3342 has been reported by liweitianux.

----------------------------------------
Bug #3342: [PF] urpf-failed doesn't work with IPv6
http://bugs.dragonflybsd.org/issues/3342

* Author: liweitianux
* Status: New
* Priority: Normal
* Category: PF
* Target version: 6.6
* Start date: 2023-02-06
----------------------------------------
Years ago, i found @urpf-failed@ doesn't work with IPv6; significant packet loss if configured.

Many PF tutorials suggest a rule like:

<pre>
block in quick from { $broken urpf-failed no-route } to any
</pre>

But it turned out @urpf-failed@ can only be configured for IPv4, like:

<pre>
block in log quick inet from urpf-failed to any
</pre>

See: https://lists.dragonflybsd.org/pipermail/users/2017-August/313577.html



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account


More information about the Bugs mailing list