On 2024/01/19 20:05, Peter Hessler wrote: > Thinking out loud, ignore addresses with scopeid (link-local), and > deprecated, then pick the zero-th address.
For places where "(iface:0)" is actually used, which I think is mainly translation rules, we pretty much always _only_ want to use addresses with global scope (neither ULA nor link-local nor deprecated). For translation rules, if ULA was wanted then I'd expect to specify the address directly. (And PF doesn't really cope with link-locals anyway afaik). For just "(iface)" with no modifier (which is more useful as a from/to address in filters/matches rather than a translation address) I think we need to include all of those.
