Send_pkt() does it support IPV6 ?
Max Laier
max at love2party.net
Tue Oct 16 00:16:19 PDT 2007
On Tuesday 16 October 2007, john.w.court at nokia.com wrote:
> Hi,
>
> Sorry if I have missed something blindingly obvious, but I can't see
> how the send_pkt() routine in ip_fw2.c would create a valid ipv6 source
> and destination address. This is relevent due to its use in
> ipfw_tick(). Basically in an ipv6 configuration when ipfw_tick() goes
> off to send a keep-alive, I think send_pkt() would produce an erroneous
> IPV4 style packet due to its use of id->dst_ip and id->src_ip rather
> than dst_ip6 and src_ip6 ? Further, ipfw_tick() then calls
> ip_output() rather than any ip6_output() routine.
>
> I am just checking before I make any modifications that I am not
> missing something fundamental that invalidates my analysis.
I don't think you are missing something. IPv6 support in ipfw is still a
second class citizen (as is stateful filtering). I remember seeing a
mail with similar topic just recently, but can't recall on which list or
from whom.
I don't see a PR for this - could you please create one so it's not
forgotten about?
--
/"\ Best regards, | mlaier at freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier at EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20071016/2aa571e7/attachment.pgp
More information about the freebsd-ipfw
mailing list