Hi,

can somebody try the following on a recent OpenBSD box?  I'm in the middle of 
reshuffling my hardware (for a couple of month now *sigh*) and don't have a 
test setup handy.  Thanks.

On a box running sshd (or something listening on an inet6 tcp port) load the 
following ruleset:

pass quick on lo0 all
pass quick on bge0 inet all
block drop log all
pass in log-all on bge0 inet6 proto tcp from any to 3000::1 port = ssh \
  flags S/SA keep state

where bge0 is a real interface and 3000::1 is configured on that interface.  
Then try "telnet 3000::1 22" and see if it works and provide me with the a 
tcpdump from pflog0 during the connection attempt - whether it works or not.

Thanks - much appreciated.

-- 
/"\  Best regards,                      | [EMAIL PROTECTED]
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | [EMAIL PROTECTED]
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

Attachment: pgpc5Mo1J3ekF.pgp
Description: PGP signature

Reply via email to