ext_if = "em0" stf_if = "stf0" tcp6_services ="{80,53,6667,6668,6669}" udp6_services = "{ 53,6667,6668,6669}" #-- IPv6 6rd Sakura Setting Start -- pass in quick on $ext_if inet proto ipv6 from any to ($ext_if) keep state pass in quick on $stf_if inet6 proto tcp from any to ($stf_if) port $tcp6_services flags S/SA keep state pass in quick on $stf_if inet6 proto udp from any to ($stf_if) port $udp6_services keep state pass in quick on $stf_if inet6 proto icmp6 all icmp6-type $icmp6_types keep state block drop in log quick on $stf_if proto icmp all block drop in log quick on $stf_if proto tcp all block drop in log quick on $stf_if proto udp all #-- IPv6 6rd Sakura Setting End --