> On Apr 21, 2018, at 3:52 PM, marco <smartos-disc...@lordsith.net> wrote: > > On Fri, Apr 20, 2018 at 08:50:37PM -0400, you (H. William Welliver III) sent > the following to [smartos-discuss] : >> Hi all, >> >> I’m having some trouble trying to set up some firewall rules on a IPv6 >> router zone and have come to the conclusion that something is broken. >> >> The following is an illustrative example (though I’ve tried all manner of >> other rules without success): >> >> net0 is connected to an upstream provider and has a /128 address. >> >> I’ve set up the following in /etc/ipf/ipf6.conf (this is the only rule >> present): >> >> block in quick on net0 proto icmp > > shouldn't that read 'block in quick on net0 proto ipv6-icmp' ?
Correct. Despite the similar sounding names, icmp6 and icmp are not the same protocol number. More at https://technotes.seastrom.com/2018/02/06/ipv6-icmp-is-not-icmp.html -r ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
