Re: npf over ipv6

[triaxx%NetBSD.org@localhost]

Michael van Elst writes:
> frederic%fauberteau.org@localhost (=?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?=) writes:
>
> > |         pass stateful in final family inet6 proto tcp flags S/FSRA to
> > { fe80:1::ec4:7aff:fe0d:b158, 2001:bc8:1200:d:ec4:7aff:fe0d:b158 } port
> > 22 # id="4"
>
> That's probably bin/55403.

The problem seems more complicated.

I have now:

| kyroz# npfctl show
| # filtering:    active
| # config:       loaded
|
| procedure "log"
|
| group default { # id="1"
|         pass stateful out final all # id="2"
|         pass stateful in final family inet4 proto tcp flags S/FSRA to 
51.159.70.149 port 22 # id="3"
|         pass stateful in final family inet6 proto tcp flags S/FSRA to 
2001:bc8:1200:d:ec4:7aff:fe0d:b158 port 22 # id="4"
|         pass final on lo0 all # id="5"
|         block all apply "log" # id="6"
| }

But

| uzqew% ssh -6 kyroz.triaxx.org
| ssh: connect to host kyroz.triaxx.org port 22: Operation timed out