>Number:         28653
>Category:       kern
>Synopsis:       ipf and IPv6 ICMP with icmp-type
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 14 09:06:00 +0000 2004
>Originator:     Martti Kuparinen
>Release:        NetBSD 2.0
>Organization:
>Environment:
System: NetBSD n121 2.99.11 NetBSD 2.99.11 (LIFEBOOK) #6: Mon Dec 13 14:33:23 EET 2004  root@n121:/usr/src/sys/arch/i386/compile/LIFEBOOK i386
Architecture: i386
Machine: i386
>Description:

IPF 4.1.3 does not work correctly with IPv6 when using the "icmp-type"
keyword. In older versions (3.4.x) there was a warning message shown
to the user if non-numeric type code was specified:

http://mail-index.netbsd.org/source-changes/2002/02/04/0077.html

>How-To-Repeat:

This /etc/ipf6.conf blocks incoming ping:

pass  in quick proto ipv6-icmp from any to any icmp-type echo keep state
block in log quick all

>Fix: