On 17/05/16(Tue) 09:26, Theo de Raadt wrote:
> > Does it need the ifdef? It's standard ipv6 api..
> 
> It is risk, all gigantic risk.
> 
> Anyone who enables that will (not..) discover that their pf rulesets
> are wrong.

I don't understand, could you explain which risk you're talking about?

It seems to me that setting this option is a no-op on OpenBSD:

     IPV6_V6ONLY int *
             Get or set whether only IPv6 connections can be made to this
             socket.  For wildcard sockets, this can restrict connections to
             IPv6 only.  With OpenBSD IPv6 sockets are always IPv6-only, so
             the socket option is read-only (not modifiable).   

Reply via email to