status of conf/3517?; ipf(8) does not work for IPv6

[Ronald van der Pol]

Their has been some discussion about conf/3517 which is about ipf(8)
filtering for IPv6. I see -current has this in /etc/rc.d/ipfilter:

ipfilter_start()
{
        echo "Enabling ipfilter."
        case `${CMD_OSTYPE}` in
        FreeBSD)
                ${ipfilter_program:-/sbin/ipf} -Fa -f \
                    "${ipfilter_rules}" ${ipfilter_flags}
                ;;
        NetBSD)
                /sbin/ipf -E -Fa
                if [ -f /etc/ipf.conf ]; then
                        /sbin/ipf -f /etc/ipf.conf
                fi
                if [ -f /etc/ipf6.conf ]; then
                        /sbin/ipf -6 -f /etc/ipf6.conf
                fi
                ;;
        esac
}

Can FreeBSD do the same as NetBSD?

There is another problem with the FreeBSD code. The ${ipfilter_flags}
won't be executed at the end of the command. It seems that it needs to
be before the -f flag:

# ipf -6 -Fa -f /tmp/ipf.rules -v
# ipf -6 -Fa -v -f /tmp/ipf.rules
[pass in from any to 2001:abcd::/128]
pass in from any to 2001:abcd::/128
#

        rvdp

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message