Re: Blocking outgoing, non-privacy ext. IPv6 addresses' traffic?

2017-04-12 Thread Paul de Weerd
On Wed, Apr 12, 2017 at 10:48:50AM +0200, Florian Ermisch wrote: | Hi everyone, | | is there a way with to identify and filter | automatically generated, MAC-based IPv6 | addresses in pf? | I think there was some bit set or flipped in | the MAC-based or the RFC 4941 privacy | extensions based addr

Blocking outgoing, non-privacy ext. IPv6 addresses' traffic?

2017-04-12 Thread Florian Ermisch
Hi everyone, is there a way with to identify and filter automatically generated, MAC-based IPv6 addresses in pf? I think there was some bit set or flipped in the MAC-based or the RFC 4941 privacy extensions based addresses. But I then still had to match an address based on a single bit (and the ne