== phase 1: root loads ip6fw.ko (admin opt-in; default policy DENY) ==
 5    1 0xffffffff82600000    20000 ip6fw.ko
net.inet6.ip6.fw.enable: 1
-- default deny: ping6 ::1 as root --
--- ::1 ping6 statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss
== phase 2: UNPRIVILEGED user (nobody) manipulates the firewall ==
-- nobody adds ACCEPT-any rule #1 --
IPV6_FW_ADD: ACCEPT-any rule #1 added, uid=65534, ret=0
-- nobody dumps the ruleset (policy disclosure) --
ip6fw_ctl: IPV6_FW_GET failed: Invalid argument
-- ping6 ::1 again (policy bypassed by the unpriv-added rule) --
1 packets transmitted, 1 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.125/0.125/0.125/0.000 ms
-- nobody zeroes counters, deletes rule #1 --
IPV6_FW_ZERO: counters cleared, ret=0
IPV6_FW_DEL: rule #1 deleted, ret=0
-- ping6 ::1 blocked again (unpriv user removed own rule) --
--- ::1 ping6 statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss
-- nobody adds rule back then FLUSHes the whole chain --
IPV6_FW_ADD: ACCEPT-any rule #1 added, uid=65534, ret=0
IPV6_FW_FLUSH: chain flushed (default kept), ret=0
ip6fw_ctl: IPV6_FW_GET failed: Invalid argument
--- ::1 ping6 statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss
== cleanup ==
unloaded