git: pf: Make ":0" (noalias) also ignore link-local IPv6 addresses

Aaron LI aly at
Sat Apr 30 22:09:52 PDT 2022

commit 6aa338e1205b533679b84dd50b38f5664f0d9cef
Author: Aaron LI <aly at>
Date:   Sun May 1 12:59:57 2022 +0800

    pf: Make ":0" (noalias) also ignore link-local IPv6 addresses
    When users mark an interface to not use aliases they likely also don't
    want to use the link-local IPv6 address there.
    For example, with the following rule to NAT IPv6:
    nat on $ext_if inet6 from $int_if:network to !$int_if:network -> ($ext_if:0)
    PF was selecting the link-local address (which comes the first) for the
    NAT'ed IPv6 address, which was wrong and broke the NAT setup.
    This commit makes PF to ignore the link-local IPv6 addresses so that the
    above NAT setup would work.
    Obtained-from: FreeBSD (revision 339835, review D17633)
    See also:

Summary of changes:
 share/man/man5/pf.conf.5      | 6 +++---
 sys/net/pf/pf_if.c            | 3 ++-
 usr.sbin/pfctl/pfctl_parser.c | 3 +++
 3 files changed, 8 insertions(+), 4 deletions(-)

DragonFly BSD source repository

More information about the Commits mailing list