Send_pkt() does it support IPV6 ?

Max Laier max at love2party.net
Tue Oct 16 00:16:19 PDT 2007


On Tuesday 16 October 2007, john.w.court at nokia.com wrote:
> Hi,
>
> Sorry if I have missed something blindingly obvious, but I can't see
> how the send_pkt() routine in ip_fw2.c would create a valid ipv6 source
> and destination address.  This is relevent due to its use in
> ipfw_tick(). Basically in an ipv6 configuration when ipfw_tick() goes
> off to send a keep-alive, I think send_pkt() would produce an erroneous
> IPV4 style packet due to its use of id->dst_ip and id->src_ip rather
> than  dst_ip6 and src_ip6 ?   Further, ipfw_tick() then calls
> ip_output() rather than any ip6_output() routine.
>
> I am just checking before I make any modifications that I am not
> missing something fundamental that invalidates my analysis.

I don't think you are missing something.  IPv6 support in ipfw is still a 
second class citizen (as is stateful filtering).  I remember seeing a 
mail with similar topic just recently, but can't recall on which list or 
from whom.

I don't see a PR for this - could you please create one so it's not 
forgotten about?

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20071016/2aa571e7/attachment.pgp


More information about the freebsd-ipfw mailing list