bin/117214: ipfw(8) fwd with IPv6 treats input as IPv4
Lars Eggert
lars.eggert at nokia.com
Sun Aug 23 14:06:03 UTC 2009
Well, one pretty simple (and not always correct) fix would be to
assume that if an address has more than 1 colon, it's IPv6.
The correct fix is to generate a small flex parser.
Lars
On 2009-8-22, at 14:42, Willem Jan Withagen wrote:
> Lars Eggert wrote:
>> The following reply was made to PR bin/117214; it has been noted by
>> GNATS.
>>
>> From: Lars Eggert <lars.eggert at nokia.com>
>> To: bug-followup at FreeBSD.org, fabian at wenks.ch
>> Cc:
>> Subject: Re: bin/117214: ipfw(8) fwd with IPv6 treats input as IPv4
>> Date: Sat, 22 Aug 2009 02:27:44 +0300
>>
>> I still see this on 7.2-STABLE:
>>
>> [root at fit: ~] uname -a
>> FreeBSD fit.nokia.com 7.2-STABLE FreeBSD 7.2-STABLE #18: Fri Jun 26
>> 15:43:17 EEST 2009 root at fit.nokia.com:/usr/obj/usr/src/sys/FIT
>> i386
>>
>> [root at fit: ~] ipfw add 64010 fwd 2001:2060:40:1::1 ip6 from
>> 2001:2060:40:1::123,2001:2060:40:1::124 to not
>> 2001:0708:0040:fff2::1/64 out
>> 64010 fwd 0.0.7.209,2060 ip6 from
>> 2001:2060:40:1::123,2001:2060:40:1::124 to not
>> 2001:708:40:fff2::/64 out
>>
>> [root at fit: ~] ipfw show 64010
>> 64010 0 0 fwd 0.0.7.209,2060 ip6 from
>> 2001:2060:40:1::123,2001:2060:40:1::124 to not
>> 2001:708:40:fff2::/64 out
>
> The trouble is with the :'s and the fact that parsing doen't really
> take
> care of multiple :'s.
> What I considering is changing it in such a way that one is allowed to
> specify ipv6 adresses as [a:bc::d] just like it works in firefox (and
> other places)
>
> Question then is do we use [a:bc::d]/48:53 or [a:bc::d/48]:53?
>
> --WjW
More information about the freebsd-ipfw
mailing list