npf over ipv6

[Frédéric Fauberteau <frederic%fauberteau.org@localhost>]

Hi,

I have the following rules:

kyroz# npfctl show
| # filtering:    active
| # config:       loaded
|
| procedure "log"
|
| group default { # id="1"
|         pass stateful out final all # id="2"
|         pass stateful in final family inet4 proto tcp flags S/FSRA to 
51.159.70.149 port 22 # id="3"
|         pass stateful in final family inet6 proto tcp flags S/FSRA to 
{ fe80:1::ec4:7aff:fe0d:b158, 2001:bc8:1200:d:ec4:7aff:fe0d:b158 } port 
22 # id="4"
|         pass final on lo0 all # id="5"
|         block all apply "log" # id="6"
| }

It connects to SSH over ipv4:

| uzqew% ssh kyroz.triaxx.org

But it doesn't over ipv6:

| uzqew% ssh -6 kyroz.triaxx.org