Re: PF support for IPv6 Extension Headers

2015-06-11 Thread Kristof Provost
(From a very quick look at the code) On 2015-06-10 20:57:02 (-0300), Fernando Gont wrote: > What's the level f support of PF wrt IPv6 Extension Headers? > It's pretty limited. There's code for a few specific header types (fragment, routing, AH, hopopts and dstopts) but nothing generic. That me

PF support for IPv6 Extension Headers

2015-06-10 Thread Fernando Gont
Folks, What's the level f support of PF wrt IPv6 Extension Headers? pf.conf(5) talks about an implicit block rule for packets employing the routing header, but I've not been able to find anything about e.g., * Filtering packets on a per-EH-type-occurrence (e.g. "block packets that contain a Dest