On Thu, Mar 20, 2025 at 07:23:20PM +1100, Jon Higgs wrote: > Looks like you might have missed an "inet". :)
Yes, that's it exactly. If you leave out the protocol specification, the rule will apply to both inet and inet6, which will of course fail if the interface does not have an IPv6 addess assigned. Well spotted, Jon! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.