Date: Sat, 4 Dec 2004 19:58:05 +0100 From: Max Laier <max@love2party.net> To: freebsd-pf@freebsd.org Cc: Bernhard Schmidt <berni@birkenwald.de> Subject: Re: IPv6 MLD packets blocked Message-ID: <200412041958.11601.max@love2party.net> In-Reply-To: <slrncr28gr.ig8.berni@bschmidt.msgid.cybernet-ag.net> References: <slrncr28gr.ig8.berni@bschmidt.msgid.cybernet-ag.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart6561382.xf86ZO2IIh Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Saturday 04 December 2004 03:34, Bernhard Schmidt wrote: > Hi, > > I'm currently trying to enable IPv6 multicast forwarding on my FreeBSD > home gateway. With both pim6sd and xorp I had the problem that MLD (IGMP > for IPv6) from clients did not come through to the appropriate daemon > and therefor groups are never subscribed. > > This seems to be a problem with pf. When I disable pf with "pfctl -d" it > works like a charm; when I enable pf again, even with the simple ruleset > > pass all Does your setup include a 6to4 (stf(4)) device? If so then you should move = to=20 a RELENG_5 with pf_if.c, rev. 1.5.2.2. (you can simply move that one file). To debug a problem like this you should use a ruleset like: block log all pass all and watch pflog on tcpdump. It'll give you information why a packet is=20 dropped. Increasing the verbosity of pf's debug facilities might also be=20 helpful: # pfctl -xm > it breaks. I've uploaded a sample of a MLD packet to > > http://www.birkenwald.de/~berni/tmp/mld.dump > > FreeBSD heimdall.birkenwald.de 5.3-STABLE FreeBSD 5.3-STABLE #0: Wed Nov > 24 00:48:49 CET 2004 pf_if.c went in "Nov 24 16:57:32 2004 UTC" so you might have missed it. > root@heimdall.birkenwald.de:/usr/obj/usr/src/sys/HEIMDALL i386 =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart6561382.xf86ZO2IIh Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBsgjDXyyEoT62BG0RAk0EAJ45QNNJyao0E5XME0NcKTIH2bbKXACffUg2 bui09Am2plXqfk/Tdmsjy6o= =o0GT -----END PGP SIGNATURE----- --nextPart6561382.xf86ZO2IIh--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412041958.11601.max>