Re: [Openvpn-devel] #636: IPv6 subnets support in PF component

2016-12-04 Thread Antonio Quartulli
Dear all, by following the suggestion received by cron2 on IRC, I decided to whitelist all those ICMPv6 packet sub-types that are strictly required to let an IPv6 host join a network. Such packets are described in RFC4890[0], sec. 4.4.1 (thanks cron2 for the pointer!), in the "Address Configurati

[Openvpn-devel] #636: IPv6 subnets support in PF component

2016-12-03 Thread Antonio Quartulli
Dear all, as a "learning exercise" I started working on #636 over the weekend in the attempt of digging deeper into the openvpn codebase. As of now I managed to make the v6 filtering work. Most of the changes are in pf.c (but also mroute.c and other files required their small dose of tweaking).