Feature #2634
closedNo IPv6 networks in firewall NAT rules
0%
Description
I'm using snapshot:
2.1-BETA0 (i386)
built on Sat Sep 15 16:38:08 EDT 2012
I tried adding a port forward rule to test a transparent proxy setup in an IP6 network and got this error:
There were error(s) loading the rules: /tmp/rules.debug:71: rule expands to no valid combination
pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [71]: nat on nfe0 proto tcp from 192.168.1.0/24 to ::1 port 80 -> (nfe0)
If I set the IP6 loopback address to an IP4 address, 127.0.0.1, the rule passes, but as you can see it's putting automatically an IP4 address in the 'from' category, when I had put an IP6 alias in that rule.
If I go to add any port forward rule, there are no IP6 networks available in the source or destination addresses.
Not sure if this is a bug or just a future feature.
BTW, the proxy (squid3 & dansguardian) works just fine in non-transparent mode. :-)