From 1142d02df85300c9dab83ed7c300f6eeed94dc9a Mon Sep 17 00:00:00 2001
From: tanimura <tanimura@FreeBSD.org>
Date: Sat, 28 May 2005 07:46:44 +0000
Subject: [PATCH] Let OSPFv3 go through ipfw.  Some more additional checks
 would be desirable, though.

---
 sys/netinet/ip_fw2.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/sys/netinet/ip_fw2.c b/sys/netinet/ip_fw2.c
index f9c48beb0526..0c1d2a2c7cce 100644
--- a/sys/netinet/ip_fw2.c
+++ b/sys/netinet/ip_fw2.c
@@ -2054,6 +2054,11 @@ do {									\
 				ulp = NULL;
 				break;
 
+			case IPPROTO_OSPFIGP:
+				/* XXX OSPF header check? */
+				PULLUP_TO(hlen, ulp, struct ip6_ext);
+				break;
+
 			default:
 				printf( "IPFW2: IPV6 - Unknown Extension Header (%d)\n",
 				    proto);