Subject: Re: pf_test6: kif == NULL, if_xname gre65
To: David Young <>
From: Steven M. Bellovin <>
List: tech-net
Date: 11/17/2006 17:17:22
On Fri, 17 Nov 2006 16:02:31 -0600, David Young <> wrote:

> The departure of IPv6 interfaces does not agree with pf.  The pfil hooks
> that signal the interface's departure run before IPv6 sends messages
> to indicate that it is leaving its multicast groups; when pf filters
> the departure messages, it does not recognize the output interface,
> so it complains at the departure of gre65, for example:
> pf_test6: kif == NULL, if_xname gre65

That works in v4, at least with no multicast running.  I use pf filters
for ppp interfaces; I see the message but no further trouble when pppd

		--Steven M. Bellovin,