[5.1.0.3599, PF] IPv6+v4 in one rule with negated source group only generates IPv4 code

Joerg Wunsch — Mon, 11 Aug 2014 18:52:38 -0000

When creating a rule that has "not group" as the source address, with "group"
only containing IPv4 addresses, but with both, IPv4 and IPv6 destination
networks, only code for IPv4 is created:

Tables: (1)

table <tbl.r0.s> { 10.1.1.1 , 10.2.2.2 }

Rule 0 (global)

pass log quick inet from ! <tbl.r0.s> to 192.168.1.1/24 keep state label "RULE 0 -- ACCEPT "

Rule fallback rule

fallback rule

block quick inet from any to any label "RULE 10000 -- DROP "

Recent changes to 269: [5.1.0.3599, PF] IPv6+v4 in one rule with negated source group only generates IPv4 code

[5.1.0.3599, PF] IPv6+v4 in one rule with negated source group only generates IPv4 code

Tables: (1)

Rule 0 (global)

Rule fallback rule

fallback rule