[DragonFlyBSD - Bug #3342] (In Progress) [PF] urpf-failed doesn't work with IPv6

[bugtracker-admin at leaf.dragonflybsd.org]

Issue #3342 has been updated by liweitianux.

Status changed from New to In Progress

Hmm, it seems this issue might have been resolved by commit ae12d7f3e2f1be15cfcf502c1dcda5a63d55ffe7 I made several months later.

Need to setup and check it out ;)

----------------------------------------
Bug #3342: [PF] urpf-failed doesn't work with IPv6
http://bugs.dragonflybsd.org/issues/3342#change-14510

* Author: liweitianux
* Status: In Progress
* Priority: Normal
* Category: PF
* Target version: 6.6
* Start date: 2023-02-06
----------------------------------------
Years ago, i found @urpf-failed@ doesn't work with IPv6; significant packet loss if configured.

Many PF tutorials suggest a rule like:

<pre>
block in quick from { $broken urpf-failed no-route } to any
</pre>

But it turned out @urpf-failed@ can only be configured for IPv4, like:

<pre>
block in log quick inet from urpf-failed to any
</pre>

See: https://lists.dragonflybsd.org/pipermail/users/2017-August/313577.html



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account