Dear all,
by following the suggestion received by cron2 on IRC, I decided to
whitelist all those ICMPv6 packet sub-types that are strictly
required to let an IPv6 host join a network.
Such packets are described in RFC4890[0], sec. 4.4.1 (thanks cron2 for
the pointer!), in the "Address Configurati
Dear all,
as a "learning exercise" I started working on #636 over the weekend in the
attempt of digging deeper into the openvpn codebase.
As of now I managed to make the v6 filtering work.
Most of the changes are in pf.c (but also mroute.c and other files required
their small dose of tweaking).