On Sun, May 23, 2010 at 07:15:07PM -0700, TimH wrote: > I have tried a number of ways to allow icmp6, as the notes in my > pf.conf (look for #####) explain below. What few examples I could find > online (http://www.benzedrine.cx/pf.conf) seemed to suggest it > shouldn't be hard, but I'm not having any success. Is anyone doing > this with 4.7? > ##### I have tried all three of these to no effect > #pass on $tunnel_if inet6 proto ipv6-icmp > #pass in on $tunnel_if inet6 proto ipv6-icmp from any to $ipv6_net > #pass quick proto icmp6 all
How about the following? pass in quick proto ipv6-icmp -- Olivier Mehani <sht...@ssji.net> PGP fingerprint: 4435 CF6A 7C8D DD9B E2DE F5F9 F012 A6E2 98C6 6655 [demime 1.01d removed an attachment of type application/pgp-signature]