Re: pf ipv6 source-routing 6.9

2021-05-10 Thread Bastien Durel
Le lundi 10 mai 2021 à 22:51 +1000, David Gwynne a écrit : > > > > On 10 May 2021, at 8:05 pm, Bastien Durel > > wrote: > > > > Le samedi 08 mai 2021 à 12:07 +0200, Bastien Durel a écrit : > > > Le 08/05/2021 à 11:56, Stuart Henderson a écrit : > > > > > > Does it work if you use the syntax

Re: pf ipv6 source-routing 6.9

2021-05-10 Thread David Gwynne
> On 10 May 2021, at 8:05 pm, Bastien Durel wrote: > > Le samedi 08 mai 2021 à 12:07 +0200, Bastien Durel a écrit : >> Le 08/05/2021 à 11:56, Stuart Henderson a écrit : > Does it work if you use the syntax suggested in the upgrade > notes > for the example with "pass in on pppoe1

Re: pf ipv6 source-routing 6.9

2021-05-10 Thread Stefan Sperling
On Mon, May 10, 2021 at 12:05:16PM +0200, Bastien Durel wrote: > Referencing fe80::520f:80ff:fe65:8800%pppoe0 in pf.conf results in a > rule referencing fe80::520f:80ff:fe65:8800 I'm not sure where the scope id gets stripped, but the above may simply be a misleading cosmetic issue. pfctl -sr

Re: pf ipv6 source-routing 6.9

2021-05-10 Thread Bastien Durel
Le samedi 08 mai 2021 à 12:07 +0200, Bastien Durel a écrit : > Le 08/05/2021 à 11:56, Stuart Henderson a écrit : > > > > Does it work if you use the syntax suggested in the upgrade > > > > notes > > > > for the example with "pass in on pppoe1 reply-to ..."? > > > > > > > > > > > For incoming

Re: pf ipv6 source-routing 6.9

2021-05-08 Thread Bastien Durel
Le 08/05/2021 à 11:56, Stuart Henderson a écrit : Does it work if you use the syntax suggested in the upgrade notes for the example with "pass in on pppoe1 reply-to ..."? For incoming connections, I tried pass in on pppoe0 inet6 reply-to fe80::520f:80ff:fe65:8800%pppoe0 keep state pass in on

Re: pf ipv6 source-routing 6.9

2021-05-08 Thread Stuart Henderson
On 2021-05-08, Bastien Durel wrote: > Le 08/05/2021 à 10:58, Stuart Henderson a écrit : >> On 2021-05-08, Bastien Durel wrote: >>> Le 07/05/2021 à 22:50, Stuart Henderson a écrit : On 2021-05-07, Bastien Durel wrote: > Hello, > > I have multiple ISPs plugged on my OpenBSD box,

Re: pf ipv6 source-routing 6.9

2021-05-08 Thread Bastien Durel
Le 08/05/2021 à 10:58, Stuart Henderson a écrit : On 2021-05-08, Bastien Durel wrote: Le 07/05/2021 à 22:50, Stuart Henderson a écrit : On 2021-05-07, Bastien Durel wrote: Hello, I have multiple ISPs plugged on my OpenBSD box, each one providing its IPv6 address space. I used to route

Re: pf ipv6 source-routing 6.9

2021-05-08 Thread Stuart Henderson
On 2021-05-08, Bastien Durel wrote: > Le 07/05/2021 à 22:50, Stuart Henderson a écrit : >> On 2021-05-07, Bastien Durel wrote: >>> Hello, >>> >>> I have multiple ISPs plugged on my OpenBSD box, each one providing its >>> IPv6 address space. >>> >>> I used to route outgoing streams with : >>> >>>

Re: pf ipv6 source-routing 6.9

2021-05-08 Thread Bastien Durel
Le 07/05/2021 à 22:50, Stuart Henderson a écrit : On 2021-05-07, Bastien Durel wrote: Hello, I have multiple ISPs plugged on my OpenBSD box, each one providing its IPv6 address space. I used to route outgoing streams with : net2_if = pppoe0 ovh_v6_router = "(" $net2_if

Re: pf ipv6 source-routing 6.9

2021-05-07 Thread Stuart Henderson
On 2021-05-07, Bastien Durel wrote: > Hello, > > I have multiple ISPs plugged on my OpenBSD box, each one providing its > IPv6 address space. > > I used to route outgoing streams with : > > net2_if = pppoe0 > ovh_v6_router = "(" $net2_if fe80::230:88ff:fe04:63c9 ")" > ovh_v6_prefix =

pf ipv6 source-routing 6.9

2021-05-07 Thread Bastien Durel
Hello, I have multiple ISPs plugged on my OpenBSD box, each one providing its IPv6 address space. I used to route outgoing streams with : net2_if = pppoe0 ovh_v6_router = "(" $net2_if fe80::230:88ff:fe04:63c9 ")" ovh_v6_prefix = "2001:41d0:fe4b:ec00::0/56" table const { $ovh_v6_prefix,