On 2014-11-08 11:18, Pieter Verberne wrote:
On 2014-11-07 14:35, Pieter Verberne wrote:
My problem:
`ping6 fe80::200:24ff:fecd:7df8%pppoe0` with pf disabled is no
problem.
ping6, with pf enabled and 'set skip on lo0' does not work very well:
I could reproduce this very easily with a clean -current installation.
<snip>
This problem started in 5.1. 5.0 is working.
http://www.openbsd.org/51.html:
pf(4) improvements:
One-shot rule support for pf(4), for use with proxies via anchors.
NAT64 support in PF using the af-to keyword.
Much improved IPv6 fragment handling.
Various enhancements with ICMP and especially ICMPv6 states
Improved IPv6 Neighbor Discovery and Multicast Listener Discovery
handling.
pfctl(8) now prints port numbers instead of service names by
default.
Netflow v9 and ipfix support for pflow(4).
Many pfsync(4) fixes and improvements including jumbo frames and
automatically requesting a bulk update after a physical interface comes
online.