Subject: Re: ipfilter 3.4beta - ipv6 filtering.
To: Darren Reed <darrenr@reed.wattle.id.au>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: tech-net
Date: 02/19/2000 23:54:25
On Sun, 20 Feb 100 18:50:25 +1100 (EST) 
 Darren Reed <darrenr@reed.wattle.id.au> wrote:

 > The way I've developed the code is such that it is different so it can
 > run on non-IPv6 systems.  NetBSD 1.5 will be an IPv6 system, thus it
 > will be possible to compile it all as IPv4/IPv6 and only have the pfil
 > hook dependant on INET6, keeping the API the same.

That's nonsense.  It's possible to build the NetBSD userland WITHOUT
INET6, and doing so does NOT break any ABI compatibility with the kernel.

 > > 	If the API is kept same regardless from "options INET6" it should
 > > 	be okay.  (always use 16bytes, or use sockaddr/sockaddr_storage
 > > 	- sockaddr comes with indication of address family so it is better
 > > 	than passing in{,6}_addr) 
 > 
 > The filter rules already have the 'version' in them, so ipfilter knows
 > what the 16 bytes are (v4/v6).

...begs the question of why you didn't use sockaddrs from the start,
but I'm not sure I want to know the answer to that question.

        -- Jason R. Thorpe <thorpej@nas.nasa.gov>