Current-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: netbsd-7 ipfilter failure?



In article <Pine.NEB.4.64.1411121338240.5477%6bone.informatik.uni-leipzig.de@localhost>,
 <6bone%6bone.informatik.uni-leipzig.de@localhost> wrote:
>I have already tested a configuration that only uses /etc/ipf.conf.
>
>    block in on ixg0 family inet
>    pass in on ixg0 family inet6
>
>The first line blocks all ipv4 traffic. It works.
>The second line should allow only ipv6 traffic. But the second line also 
>re-allows ipv4 traffic. So I assume that the address family is not 
>evaluated correctly.

Why don't you make the first rule final?

christos



Home | Main Index | Thread Index | Old Index