Date: Wed, 19 Jun 2019 10:03:48 -0700 From: Michael Sierchio <kudzu@tenebras.com> To: "Andrey V. Elsukov" <bu7cher@yandex.ru> Cc: "freebsd-ipfw@freebsd.org" <freebsd-ipfw@freebsd.org> Subject: Re: Look for an ipfw example using NPTv6 Message-ID: <CAHu1Y70FbnBVHr1E9m-B48Z_TuUr57WBrqxLy_NJJgn5MtVmgw@mail.gmail.com> In-Reply-To: <a5970ad6-911f-b2d6-c930-8f90c8e61e30@yandex.ru> References: <CAHu1Y72ezsU-f7WbYpH3h0Qcj1uttCsnQHqFue9F9xJmOtZd=w@mail.gmail.com> <a5970ad6-911f-b2d6-c930-8f90c8e61e30@yandex.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Are you saying NPTv6 cannot rewrite a LL prefix to a public prefix, such as the one held on the external interface? On Wed, Jun 19, 2019 at 4:26 AM Andrey V. Elsukov <bu7cher@yandex.ru> wrote= : > On 18.06.2019 23:00, Michael Sierchio wrote: > > I'm looking for a simple firewall example using nptv6 to translate > > link-local addresses to match the prefix assigned by my ISP. I'll be > using > > stateful rules and allowing only outbound traffic. > > > > If you have a snippet, I'l be grateful. Thanks. > > NPTv6 module is targeted to translate routed traffic. IPv6 link-local > addresses are not forward-able. Thus you can not configure nptv6 > instance with such prefix. > > -- > WBR, Andrey V. Elsukov > > --=20 "Well," Brahm=C4=81 said, "even after ten thousand explanations, a fool is = no wiser, but an intelligent person requires only two thousand five hundred." - The Mah=C4=81bh=C4=81rata
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHu1Y70FbnBVHr1E9m-B48Z_TuUr57WBrqxLy_NJJgn5MtVmgw>