On Fri, Oct 18, 2013 at 08:45:02PM +0200, Alexander Bluhm wrote:
> Our IPv6 stack scans all extension headers for routing header type
> 0 and drops the packet if it finds one. RFC 5095 demands to handle
> a routing header type 0 like an unrecognised routing type. This
> is enough to protect the o
Hi tech@.
This is on 5.4-stable. vlan is only used to see what resulting prio is.
The ruleset:
---
ext_if="em0"
int_if="vlan2525"
set skip on { lo enc0 em1 }
block log all
#match on { $int_if } inet proto icmp all icmp-type echoreq set prio 5
pass quick on { $ext_if, $int_if }
---
The vlan:
---
How to help out if I want to help in converting apache configuration to
Nginx one.