tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: NPF issue with inet6($if) vs. ifaddrs($if)



On Wednesday 16 Nov 2022, at 21:09, Michael van Elst wrote:
> anthony.mallet%laas.fr@localhost (Anthony Mallet) writes:
>
> ># npfctl show | grep "relevant content"
> >  pass stateful in final family inet6 proto udp to { fe80:1::xxx%re0,
> >  $gateway } port 123 apply "log" # id="23"
>
> I would guess this is PR kern/55403.
>

Nice catch, thanks! The bytecode for inet6($ifgw) looks the same as
what you posted in kern/55403: it jumps to the rest of the rule
matching as soon as one byte of the address matches :/

For the ifaddrs($ifgw) the bytecode uses "unimp 0x27". I'm not sure
what this means, but this seems to behave correctly at least.


Home | Main Index | Thread Index | Old Index