On Wed, Feb 19, 2003 at 09:47:31PM +0100, Henning Brauer wrote: > > I could be kind and tell you that you just want to add the address family to > your rule, but that'd probably be to much handholding ;-)
oh ipv6... never tought of that.. and actually i removed it from most of my kernels, except this one.. shame on me. anyway, if parser said: stdin:3: icmp version does not match inet6 address family it would be a lot more clear, because, I guess, 'any' includes also my ipv6 address for that nic (no matther that icmp should be 'icmp6' for it to actually match). btw Wouter Clarie: no, I don't expect to flags S match udp/icmp but I preffer to have one rule for the three protocols; PF takes care of applying propper rules to propper protocols. about flags S, wheren't we be supposed to change flags S/SA for for flags S for future changes on PF? I may very well misunderstood that; if you confirm, I'm going to scan archives for propper info. thank you
