[DragonFlyBSD - Bug #3342] (Resolved) [PF] urpf-failed doesn't work with IPv6

[liweitianux]

Issue #3342 has been updated by liweitianux.

Status changed from In Progress to Resolved

This particular issue has been resolved, and the related issues are tracked elsewhere.

----------------------------------------
Bug #3342: [PF] urpf-failed doesn't work with IPv6
http://bugs.dragonflybsd.org/issues/3342#change-14778

* Author: liweitianux
* Status: Resolved
* Priority: Normal
* Category: PF
* Target version: 6.6
* Start date: 2023-02-06
----------------------------------------
Years ago, i found @urpf-failed@ doesn't work with IPv6; significant packet loss if configured.

Many PF tutorials suggest a rule like:

<pre>
block in quick from { $broken urpf-failed no-route } to any
</pre>

But it turned out @urpf-failed@ can only be configured for IPv4, like:

<pre>
block in log quick inet from urpf-failed to any
</pre>

See: https://lists.dragonflybsd.org/pipermail/users/2017-August/313577.html



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account