PF not routing traffic to IPv4 interface when IPv6 is enabled

Hi all,

I just noticed that on my Freebsd server the PF firewall is
not filtering
packets for ipv4.   Recently another admin enabled IPv6
within rc.conf, but
we never assigned an IP6 IP.  The interface has one IPv4 IP
and many
aliases for other IP4 IPs we own.

# pfctl -v -s info

Interface Stats for nve0              IPv4             IPv6
Bytes In                               0            26037
Bytes Out                              0                0
Packets In
Passed                               0                0
Blocked                              0              292
Packets Out
Passed                               0                0
Blocked                              0                 0

Does anyone know why this is the case?

Regards,
Ryan
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

Ryan Phillips <ryan-bsdtrolocsis.com> said:
> Hi all,
> 
> I just noticed that on my Freebsd server the PF
firewall is not filtering
> packets for ipv4.   Recently another admin enabled IPv6
within rc.conf, but
> we never assigned an IP6 IP.  The interface has one
IPv4 IP and many
> aliases for other IP4 IPs we own.
> 

Clarification: The IPv6 interface does have a ipv6 link
local address.

thanks.

-ryan
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On Thursday 13 December 2007, Ryan Phillips wrote:
> Ryan Phillips <ryan-bsdtrolocsis.com> said:
> > Hi all,
> >
> > I just noticed that on my Freebsd server the PF
firewall is not
> > filtering packets for ipv4.   Recently another
admin enabled IPv6
> > within rc.conf, but we never assigned an IP6 IP. 
The interface has
> > one IPv4 IP and many aliases for other IP4 IPs we
own.
>
> Clarification: The IPv6 interface does have a ipv6 link
local address.

You don't give enough information to debug this problem.  At
very least 
your ruleset (-vvgsr) and ifconfig should be supplied.

-- 
/"  Best regards,                      | mlaierfreebsd.org
 /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.l
ove2party.net/  | mlaierEFnet
/   ASCII Ribbon Campaign              | Against HTML Mail
and News