Is it possible to write pf pass/block rules that match the ipv6
interface ID and ignore the prefix (a wildcard prefix if that makes
sense)?
As my ISP's assigned prefix is not static/stable, and my systems
always create the same IID when using SLAAC, it would really be
helpful to have this feature for ipv6 firewalling.

Thank you,
Chris

Reply via email to