tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: NPF issue with inet6($if) vs. ifaddrs($if)
On Wednesday 16 Nov 2022, at 21:09, Michael van Elst wrote:
> anthony.mallet%laas.fr@localhost (Anthony Mallet) writes:
>
> ># npfctl show | grep "relevant content"
> > pass stateful in final family inet6 proto udp to { fe80:1::xxx%re0,
> > $gateway } port 123 apply "log" # id="23"
>
> I would guess this is PR kern/55403.
>
Nice catch, thanks! The bytecode for inet6($ifgw) looks the same as
what you posted in kern/55403: it jumps to the rest of the rule
matching as soon as one byte of the address matches :/
For the ifaddrs($ifgw) the bytecode uses "unimp 0x27". I'm not sure
what this means, but this seems to behave correctly at least.
Home |
Main Index |
Thread Index |
Old Index