I'm seeing strange behaviour with IPFilter and Solaris 6to4 tunnels (which are now available with Solaris 9 Update 3). When the system comes up IPFilter doesn't attach to the tunnel interface, in this case ip.6to4tun0, and it doesn't block packets. So even though my ipf6.conf has only
block in log all block out log all I can still ping ipv6.research.microsoft.com Then I run /etc/init.d/ipfboot reipf and I see this output: attach to [ip.6to4tun0,0] - IPv6 Now the pings don't work, but nothing is logged. When I add pass out quick proto ipv6-icmp from any to any icmp-type 128 keep state and reload it still doesn't work and nothing is logged. Is IPFilter not compatible with 6to4 tunnels yet? I am using IPFilter 3.4.32 -Dave
