Date: Sat, 22 Nov 2014 12:55:41 +0000 From: Robin Geuze <robing@transip.nl> To: Niklaas Baudet von Gersdorff <niklaas@kulturflatrate.net> Cc: "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org> Subject: Re: Configuring PF with Jails only having IPv6 Message-ID: <AM3PR02MB03919B240CBCB1009066B47BAA740@AM3PR02MB0391.eurprd02.prod.outlook.com>
next in thread | raw e-mail | index | archive | help
SVB2NiB1c2VzIGljbXA2IHRvIHRycW5zbWl0IG5kcCBwYWNrZXRzLiBOZHAgaXMgYmFzaWNhbGx5 IHRoZSBpcHY2IHZlcnNpb24gb2YgYXJwLiBCYXNlZCBvbiB5b3VyIHBhY2tldCBkdW1wIGl0IHNl ZW1zIHlvdXIgc2VydmVyIGlzIHRyeWluZyB0byBmaWd1cmUgb3V0IHRoZSBtYWMgYWRkcmVzcyBm b3IgdGhlIHJvdXRlciBmb3IgaXB2NiBidXQgaXMgZGlzYWxsb3dlZCBieSB5b3VyIHBmIHJ1bGVz LiAicGFzcyBpbiBxdWljayBpY21wNiBmcm9tIGFueSB0byBhbnkiIGFuZCAicGFzcyBvdXQgcXVp Y2sgaWNtcDYgZnJvbSBhbnkgdG8gYW55IiBzaG91bGQgZml4IHlvdXIgcHJvYmxlbS4NCg0KT24g MjIgTm92IDIwMTQgMTA6MjAsIE5pa2xhYXMgQmF1ZGV0IHZvbiBHZXJzZG9yZmYgPG5pa2xhYXNA a3VsdHVyZmxhdHJhdGUubmV0PiB3cm90ZToNCkRlYXIgbGlzdCBtZW1iZXJzLA0KDQpJIGhhdmUg YmVlbiBzdHJ1Z2dsaW5nIHRvIHByb3Blcmx5IHNldC11cCBQRiBmb3Igc29tZSBkYXlzLiBJIGFt IHJlbnRpbmcNCmEgcm9vdCBzZXJ2ZXIgdGhhdCBoYXMgb25lIHB1YmxpYyBJUHY0IGFkZHJlc3Mg YW5kIGEgLzY0IElQdjYgc3VibmV0LiBJdA0KaXMgdGhlIGZpcnN0IHRpbWUgdGhhdCBJIGFtIHVz aW5nIEZyZWVCU0QgMTAuIEkgZ290IGF0dHJhY3RlZCBieSB0aGUNCmphaWxzIGNvbmNlcHQgYW5k IHN1Y2Nlc3NmdWxseSBzZXQtdXAgdGhlIHJvb3Qgc2VydmVyIGl0c2VsZiBhcyB3ZWxsIGFzDQpv bmUgamFpbCB3aXRoIGV6amFpbCB1c2luZyBvbmUgSVB2NiBhZGRyZXNzLiBJdCBpcyBwb3NzaWJs ZSB0byBjb25uZWN0DQp0byB0aGUgamFpbCB2aWEgU1NIIHdoZW4gUEYgaXMgX2Rpc2FibGVkXy4N Cg0KVGhlIG5ldHdvcmsgY29uZmlndXJhdGlvbiBsb29rcyBhcyBmb2xsb3dzLiBJIGNlbnNvcmVk IHNvbWUNCmluZm9ybWF0aW9uLiBUaGUgaW5mb3JtYXRpb24gdGhhdCBpcyBjZW5zb3JlZCBpcyBl eHBsYWluZWQgYWZ0ZXIgZWFjaA0Kb3V0cHV0Og0KDQogICAgIyBpZmNvbmZpZw0KICAgIHJlMDog ZmxhZ3M9ODg0MzxVUCxCUk9BRENBU1QsUlVOTklORyxTSU1QTEVYLE1VTFRJQ0FTVD4gbWV0cmlj IDAgbXR1IDE1MDANCiAgICAgICAgICAgIG9wdGlvbnM9ODIwOWI8UlhDU1VNLFRYQ1NVTSxWTEFO X01UVSxWTEFOX0hXVEFHR0lORyxWTEFOX0hXQ1NVTSxXT0xfTUFHSUMsTElOS1NUQVRFPg0KICAg ICAgICAgICAgZXRoZXIgWyMgTUFDIGFkZHJlc3NdDQogICAgICAgICAgICBpbmV0IFsjMSAgICAg ICAgXSBuZXRtYXNrIDB4ZmZmZmZmZmYgYnJvYWRjYXN0IFsjMiAgICAgICAgXQ0KICAgICAgICAg ICAgaW5ldDYgZmU4MDo6NmU2Mjo2ZGZmOmZlNjA6NzRmYiVyZTAgcHJlZml4bGVuIDY0IHNjb3Bl aWQgMHgxDQogICAgICAgICAgICBpbmV0NiBbIzMgICAgICAgICAgICAgICAgICBdIHByZWZpeGxl biA2NA0KICAgICAgICAgICAgaW5ldDYgWyM0ICAgICAgICAgICAgICAgICAgXSBwcmVmaXhsZW4g NjQNCiAgICAgICAgICAgIG5kNiBvcHRpb25zPTgwMjE8UEVSRk9STU5VRCxBVVRPX0xJTktMT0NB TCxERUZBVUxUSUY+DQogICAgICAgICAgICBtZWRpYTogRXRoZXJuZXQgYXV0b3NlbGVjdCAoMTAw MGJhc2VUIDxmdWxsLWR1cGxleD4pDQogICAgICAgICAgICBzdGF0dXM6IGFjdGl2ZQ0KICAgIGxv MDogZmxhZ3M9ODA0OTxVUCxMT09QQkFDSyxSVU5OSU5HLE1VTFRJQ0FTVD4gbWV0cmljIDAgbXR1 IDE2Mzg0DQogICAgICAgICAgICBvcHRpb25zPTYwMDAwMzxSWENTVU0sVFhDU1VNLFJYQ1NVTV9J UFY2LFRYQ1NVTV9JUFY2Pg0KICAgICAgICAgICAgaW5ldDYgOjoxIHByZWZpeGxlbiAxMjgNCiAg ICAgICAgICAgIGluZXQ2IGZlODA6OjElbG8wIHByZWZpeGxlbiA2NCBzY29wZWlkIDB4Mg0KICAg ICAgICAgICAgaW5ldCAxMjcuMC4wLjEgbmV0bWFzayAweGZmMDAwMDAwDQogICAgICAgICAgICBu ZDYgb3B0aW9ucz0yMTxQRVJGT1JNTlVELEFVVE9fTElOS0xPQ0FMPg0KICAgIHBmbG9nMDogZmxh Z3M9MTQxPFVQLFJVTk5JTkcsUFJPTUlTQz4gbWV0cmljIDAgbXR1IDMzMTYwDQoNClsjMV0gPSBJ UHY0IGFkZHJlc3Mgb2Ygcm9vdCBzZXJ2ZXINClsjMl0gPSBJUHY0IGFkZHJlc3Mgb2Ygcm9vdCBz ZXJ2ZXIncyBnYXRld2F5DQpbIzNdID0gSVB2NiBhZGRyZXNzIG9mIHJvb3Qgc2VydmVyDQpbIzRd ID0gSVB2NiBhZGRyZXNzIG9mIGphaWwNCg0KICAgICMgbmV0c3RhdCAtcg0KICAgIFJvdXRpbmcg dGFibGVzDQoNCiAgICBJbnRlcm5ldDoNCiAgICBEZXN0aW5hdGlvbiAgICAgICAgR2F0ZXdheSAg ICAgICAgICAgIEZsYWdzICAgIFJlZnMgICAgICBVc2UgIE5ldGlmIEV4cGlyZQ0KICAgIGRlZmF1 bHQgICAgICAgICAgICBzdGF0aWMuWyMyXSAgICAgICAgVUdTICAgICAgICAgMCAgIDExMDYxNSAg ICByZTANCiAgICBsb2NhbGhvc3QgICAgICAgICAgbGluayMyICAgICAgICAgICAgIFVIICAgICAg ICAgIDAgICAgIDE2MTQgICAgbG8wDQogICAgc3RhdGljLlsjMl0gICAgICAgIFtzb21lIE1BQyBh ZGRyZXNzXSBVSFMgICAgICAgICAwICAgICAgICAwICAgIHJlMA0KICAgIHN0YXRpYy5bIzFdICAg ICAgICBsaW5rIzEgICAgICAgICAgICAgVUhTICAgICAgICAgMCAgICAgODg5OCAgICBsbzAgPT4N CiAgICBbIzQgICAgICAgIF0vMzIgICAgbGluayMxICAgICAgICAgICAgIFUgICAgICAgICAgIDAg ICAgICAgIDAgICAgcmUwDQoNCiAgICBJbnRlcm5ldDY6DQogICAgRGVzdGluYXRpb24gICAgICAg IEdhdGV3YXkgICAgICAgICAgICBGbGFncyAgICAgIE5ldGlmIEV4cGlyZQ0KICAgIDo6ICAgICAg ICAgICAgICAgICBsb2NhbGhvc3QgICAgICAgICAgVUdSUyAgICAgICAgbG8wID0+DQogICAgZGVm YXVsdCAgICAgICAgICAgIGZlODA6OjElcmUwICAgICAgICBVR1MgICAgICAgICByZTANCiAgICBs b2NhbGhvc3QgICAgICAgICAgbGluayMyICAgICAgICAgICAgIFVIICAgICAgICAgIGxvMA0KICAg IDo6ZmZmZjowLjAuMC4wICAgICBsb2NhbGhvc3QgICAgICAgICAgVUdSUyAgICAgICAgbG8wDQog ICAgWyMzICAgICAgICAgICAgICBdIGxpbmsjMSAgICAgICAgICAgICBVICAgICAgICAgICByZTAN CiAgICBbIzMgICAgICAgICAgICAgIF0gbGluayMxICAgICAgICAgICAgIFVIUyAgICAgICAgIGxv MA0KICAgIFsjMyAgICAgICAgICAgICAgXSBsaW5rIzEgICAgICAgICAgICAgVUhTICAgICAgICAg bG8wDQogICAgWyMzICAgICAgICAgICAgICBdIGxpbmsjMSAgICAgICAgICAgICBVSFMgICAgICAg ICBsbzANCiAgICBmZTgwOjogICAgICAgICAgICAgbG9jYWxob3N0ICAgICAgICAgIFVHUlMgICAg ICAgIGxvMA0KICAgIGZlODA6OiVyZTAgICAgICAgICBsaW5rIzEgICAgICAgICAgICAgVSAgICAg ICAgICAgcmUwDQogICAgZmU4MDo6NmU2Mjo2ZGZmOmZlIGxpbmsjMSAgICAgICAgICAgICBVSFMg ICAgICAgICBsbzANCiAgICBmZTgwOjolbG8wICAgICAgICAgbGluayMyICAgICAgICAgICAgIFUg ICAgICAgICAgIGxvMA0KICAgIGZlODA6OjElbG8wICAgICAgICBsaW5rIzIgICAgICAgICAgICAg VUhTICAgICAgICAgbG8wDQogICAgZmYwMTo6JXJlMCAgICAgICAgIGZlODA6OjZlNjI6NmRmZjpm ZSBVICAgICAgICAgICByZTANCiAgICBmZjAxOjolbG8wICAgICAgICAgbG9jYWxob3N0ICAgICAg ICAgIFUgICAgICAgICAgIGxvMA0KICAgIGZmMDI6OiAgICAgICAgICAgICBsb2NhbGhvc3QgICAg ICAgICAgVUdSUyAgICAgICAgbG8wDQogICAgZmYwMjo6JXJlMCAgICAgICAgIGZlODA6OjZlNjI6 NmRmZjpmZSBVICAgICAgICAgICByZTANCiAgICBmZjAyOjolbG8wICAgICAgICAgbG9jYWxob3N0 ICAgICAgICAgIFUgICAgICAgICAgIGxvMA0KDQoNClsjMV0gPSBJUHY0IGFkZHJlc3Mgb2YgdGhl IHJvb3Qgc2VydmVyIGluIHJldmVyc2Ugb3JkZXINClsjMl0gPSBJUHY0IGFkZHJlc3Mgb2YgdGhl IGdhdGV3YXkgb2YgdGhlIHJvb3Qgc2VydmVyIGluIHJldmVyc2Ugb3JkZXINClsjM10gPSBJUHY2 IHN1Ym5ldA0KWyM0XSA9IElQdjQgYWRkcmVzcyBvZiB0aGUgcm9vdCBzZXJ2ZXINCg0KVGhlIG5l dHdvcmsgY29uZmlndXJhdGlvbiBpcyB0YWtlbiBmcm9tDQoNCiAgICBodHRwOi8vd2lraS5oZXR6 bmVyLmRlL2luZGV4LnBocC9GcmVlQlNEX2luc3RhbGxpZXJlbi9lbiNJUHY2DQoNCmFuZCBwcm92 aWRlZCBieSB0aGUgcHJvdmlkZXIgd2hlcmUgSSBhbSByZW50aW5nIHRoZSByb290IHNlcnZlciB3 aGljaA0KcmVzdWx0cyBpbiB0aGUgZm9sbG93aW5nIGNvbmZpZ3VyYXRpb24gaW4gYC9ldGMvcmMu Y29uZmA6DQoNCiAgICBpZmNvbmZpZ19yZTA9ImluZXQgWyMxICAgICAgICBdLzMyIg0KICAgIGdh dGV3YXlfaWY9InJlMCINCiAgICBnYXRld2F5X2lwPSJbIzIgICAgICAgIF0iDQogICAgc3RhdGlj X3JvdXRlcz0iZ2F0ZXdheSBkZWZhdWx0Ig0KICAgIHJvdXRlX2dhdGV3YXk9Ii1ob3N0ICRnYXRl d2F5X2lwIC1pbnRlcmZhY2UgJGdhdGV3YXlfaWYiDQogICAgcm91dGVfZGVmYXVsdD0iZGVmYXVs dCAkZ2F0ZXdheV9pcCINCg0KICAgIGlwdjZfZGVmYXVsdF9pbnRlcmZhY2U9InJlMCINCiAgICBp ZmNvbmZpZ19yZTBfaXB2Nj0iWyMzICAgICAgICAgICAgICAgICAgXS82NCINCiAgICAjIHNldCBh IHN0YXRpYyBsb2NhbCBpbnRlcmZhY2Utcm91dGUNCiAgICBpcHY2X2RlZmF1bHRyb3V0ZXI9ImZl ODA6OjElcmUwIg0KDQogICAgaWZjb25maWdfcmUwX2FsaWFzMD0iaW5ldDYgWyM0ICAgICAgICAg ICAgICAgICAgXS82NCINCg0KWyMxXSA9IElQdjQgYWRkcmVzcyBvZiB0aGUgcm9vdCBzZXJ2ZXIN ClsjMl0gPSBJUHY0IGFkZHJlc3Mgb2YgdGhlIGdhdGV3YXkgb2YgdGhlIHJvb3Qgc2VydmVyDQpb IzNdID0gSVB2NiBhZGRyZXNzIG9mIHRoZSByb290IHNlcnZlcg0KWyM0XSA9IElQdjYgYWRkcmVz cyBvZiB0aGUgamFpbA0KDQpUaGUgZm9sbG93aW5nIGNvbmZpZ3VyYXRpb24gSSBiYXNpY2FsbHkg dG9vayBmcm9tIHBmLmNvbmYoNSk6DQoNCiAgICAjIHBmY3RsIC12bmYgL2V0Yy9wZi5jb25mDQog ICAgZXh0X2lmID0gInJlMCINCiAgICBzZXJ2aWNlcyA9ICJ7IHNzaCB9Ig0KICAgIHRhYmxlIDxj bGllbnRzPiBwZXJzaXN0IHsgWyMxXSBbIzJdIFsjM10gfQ0KICAgIHNldCBza2lwIG9uIHsgbG8w IH0NCiAgICBzY3J1YiBpbiBvbiByZTAgYWxsIGZyYWdtZW50IHJlYXNzZW1ibGUNCiAgICBibG9j ayByZXR1cm4gbG9nIG9uIHJlMCBhbGwNCiAgICBibG9jayBkcm9wIGluIGZyb20gbm8tcm91dGUg dG8gYW55DQogICAgYmxvY2sgZHJvcCBpbiBmcm9tIHVycGYtZmFpbGVkIHRvIGFueQ0KICAgIGJs b2NrIGRyb3Agb3V0IGxvZyBxdWljayBvbiByZTAgZnJvbSAhIDxjbGllbnRzPiB0byBhbnkNCiAg ICBibG9jayBkcm9wIGluIHF1aWNrIG9uIHJlMCBpbmV0IGZyb20gYW55IHRvIDI1NS4yNTUuMjU1 LjI1NQ0KICAgIGJsb2NrIGRyb3AgaW4gbG9nIHF1aWNrIG9uIHJlMCBpbmV0IGZyb20gMTAuMC4w LjAvOCB0byBhbnkNCiAgICBibG9jayBkcm9wIGluIGxvZyBxdWljayBvbiByZTAgaW5ldCBmcm9t IDE3Mi4xNi4wLjAvMTIgdG8gYW55DQogICAgYmxvY2sgZHJvcCBpbiBsb2cgcXVpY2sgb24gcmUw IGluZXQgZnJvbSAxOTIuMTY4LjAuMC8xNiB0byBhbnkNCiAgICBibG9jayBkcm9wIGluIGxvZyBx dWljayBvbiByZTAgaW5ldCBmcm9tIDI1NS4yNTUuMjU1LjI1NSB0byBhbnkNCiAgICBwYXNzIG91 dCBvbiByZTAgcHJvdG8gdWRwIGFsbCBrZWVwIHN0YXRlDQogICAgcGFzcyBpbiBvbiByZTAgcHJv dG8gdWRwIGZyb20gYW55IHRvIGFueSBwb3J0ID0gZG9tYWluIGtlZXAgc3RhdGUNCiAgICBwYXNz IG9uIHJlMCBpbmV0IHByb3RvIGljbXAgYWxsIGljbXAtdHlwZSBlY2hvcmVxIGNvZGUgMCBrZWVw IHN0YXRlDQogICAgcGFzcyBvdXQgb24gcmUwIHByb3RvIHRjcCBhbGwgZmxhZ3MgUy9TQSBtb2R1 bGF0ZSBzdGF0ZQ0KICAgIHBhc3MgaW4gb24gcmUwIHByb3RvIHRjcCBmcm9tIGFueSB0byBhbnkg cG9ydCA9IHNzaCBmbGFncyBTL1NBIGtlZXAgc3RhdGUNCiAgICBibG9jayBkcm9wIGluIG9uIHJl MCBwcm90byB0Y3AgZnJvbSBhbnkgb3MgIm5vbWF0Y2giIHRvIGFueSBwb3J0ID0gc210cA0KDQpb IzFdID0gSVB2NCBhZGRyZXNzIG9mIHRoZSByb290IHNlcnZlcg0KWyMyXSA9IElQdjYgYWRkcmVz cyBvZiB0aGUgcm9vdCBzZXJ2ZXINClsjMl0gPSBJUHY2IGFkZHJlc3Mgb2YgdGhlIGphaWwNCg0K QXMgYSBzdGFydCBJIHdvdWxkIGxpa2UgdG8gYmxvY2sgZXZlcnl0aGluZyBhbmQgb25seSBvcGVu IHRoZSBTU0ggcG9ydA0Kc28gdGhhdCBJIGNhbiBjb25uZWN0IHRvIHRoZSByb290IHNlcnZlciBp dHNlbGYgYXMgd2VsbCBhcyB0aGUgamFpbHMNCnRoYXQgSSBzZXQtdXAuDQoNCkFsdGhvdWdoIEkg ZGlkIGxvdHMgb2YgcmVzZWFyY2ggb24gdGhlIHdlYiwgSSBoYXZlbid0IGZvdW5kIGFueSBzb2x1 dGlvbg0KdG8gY29ubmVjdCB0byB0aGUgamFpbCB3aGlsZSBQRiBpcyBlbmFibGVkIHlldC4gSSBn dWVzcyB0aGlzIGNvbWVzIGZyb20NCnRoZSBzb21laG93ICJ3ZWlyZCIgc2V0LXVwIG9mIHRoZSBy b3V0aW5nIGluIGAvZXRjL3JjLmNvbmZgIGFuZCB0aGUgZmFjdA0KdGhhdCBJIGRvIG5vdCB1bmRl cnN0YW5kIGl0LiBUaGUgZm9sbG93aW5nIGV4Y2VycHQgaXMgZnJvbSBgcGZsb2cwYA0Kd2hpY2gg SSBnZXQgd2hlbiBJIHRyeSB0byBjb25uZWN0IHRvIHRoZSBqYWlsIHZpYSBTU0guDQoNCg0KICAg IDAwOjAwOjAxLjA0Mzk3NSBydWxlIDAuLjE2Nzc3MjE2LzAobWF0Y2gpOiBibG9jayBvdXQgb24g cmUwOiAoaGxpbSAyNTUsIG5leHQtaGVhZGVyIElDTVB2NiAoNTgpIHBheWxvYWQgbGVuZ3RoOiAz MikgWyMxICAgICAgICAgICAgICAgICAgXSA+IGZmMDI6OjE6ZmYwMDoxOiBbaWNtcDYgc3VtIG9r XSBJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCBsZW5ndGggMzIsIHdobyBoYXMgZmU4MDo6 MQ0KICAgICAgICAgICAgICBzb3VyY2UgbGluay1hZGRyZXNzIG9wdGlvbiAoMSksIGxlbmd0aCA4 ICgxKTogWyMgTUFDIGFkZHJlc3MgIF0NCg0KWyMxXSA9IElQdjYgYWRkcmVzcyBvZiBqYWlsDQoN ClNvIGl0IGxvb2tzIGxpa2UgSUNNUHY2IHRyYWZmaWMgaXMgYmxvY2tlZCBidXQgSSBhbSBub3Qg c3VyZSBhYm91dCB0aGlzLg0KTWF5YmUgSSBhbHNvIG5lZWQgdG8gYWRkIHRoZSAicm91dGluZyBp bmZvcm1hdGlvbiIgdG8gUEYncyBjb25maWd1cmF0aW9uDQpidXQgSSBkbyBub3Qga25vdyBob3cg dG8gZG8gdGhpcy4NCg0KQW55IGhlbHAgaXMgdmVyeSBtdWNoIGFwcHJlY2lhdGVkLg0KDQpCZXN0 LA0KDQotLQ0KTmlrbGFhcw0KDQpCYXVkZXQgdm9uIEdlcnNkb3JmZg0KbmlrbGFhc0BrdWx0dXJm bGF0cmF0ZS5uZXQNCg0KaHR0cDovL3d3dy50d2l0dGVyLmNvbS9OQnZHZXJzZG9yZmYNCmh0dHA6 Ly93d3cua3VsdHVyZmxhdHJhdGUubmV0L25pa2xhYXMNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpmcmVlYnNkLXBmQGZyZWVic2Qub3JnIG1haWxpbmcg bGlzdA0KaHR0cDovL2xpc3RzLmZyZWVic2Qub3JnL21haWxtYW4vbGlzdGluZm8vZnJlZWJzZC1w Zg0KVG8gdW5zdWJzY3JpYmUsIHNlbmQgYW55IG1haWwgdG8gImZyZWVic2QtcGYtdW5zdWJzY3Jp YmVAZnJlZWJzZC5vcmciDQo=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AM3PR02MB03919B240CBCB1009066B47BAA740>