Le mercredi 12 mars 2014, 17:51:02 Simon Perreault a écrit : > Le 2014-03-12 17:48, Stéphane Guedon a écrit : > > The fact is that, now, your code don't work because I don't > > understand how to set it up. I have had a look at all the doc > > found on internet (official or not) and can' figure how how to > > transform 64:ff9b::/96 to inet and back. > > Well, your pf rule looks good. But you haven't shown us what makes > you think it doesn't work. What did you investigate? Did you do > tcpdump on ingress and egress interfaces? etc. etc. Show us your > homework! > > Simon
I tried telnet -6 twitter.com (or other famous ipv4-only websites) on the server itself, or on my desktop. This desktop access ipv6 world (v6.facebook and others) through the server without problem (so I assume the routing doesn't have any problem). the dns send well good adresses (64:ff9b::c710:9c06 and 64:ff9b::c710:9c26 for twitter). When I looked at the log or read it real time, pf says he doesn't received anything. You may be right. maybe the pf rule is good... eventhough, why there's nothing ? [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
