Tuesday, April 11, 2023

Re: IPv4 to IPv6 mapping

On Fri, 2023-04-07 at 10:30 +0000, Stuart Henderson wrote:
> On 2023-04-04, Nicolas Goy <me@kuon.ch> wrote:
>
>
> Looking at pf.conf(5) for syntax I just tried something fairly
> obvious:
>
> pass in quick log proto tcp from any to $v4_address port 8383 af-to
> inet6 from $dummy_v6_address to $listening_v6_address
>

Yeah, but as you said, you lose source address.

I was trying to get the effect that the source address would be changed
in a predictable way.

For example, instead of dummy_v6_address, you give a /96 subnet, and
the source ipv4 would be put in the last 32 bits. But af-to seems to be
only able to do that with destination.



--
Nicolas Goy
Developer & Engineer

https://kuon.ch
https://goyman.com

No comments:

Post a Comment