Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Dec 2001 10:43:04 +0100 (CET)
From:      Volker Stolz <vs@foldr.org>
To:        FreeBSD-gnats-submit@freebsd.org
Subject:   bin/33087: No automatic ipf setup for IPv6
Message-ID:  <200112220943.fBM9h4a26798@theater.dyndns.org>

next in thread | raw e-mail | index | archive | help

>Number:         33087
>Category:       bin
>Synopsis:       No automatic ipf setup for IPv6
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Dec 22 01:50:01 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Volker Stolz
>Release:        FreeBSD 4.4-STABLE i386
>Organization:
Lehrstuhl für Informatik II
>Environment:
System: FreeBSD erde.ikea.net 4.4-STABLE FreeBSD 4.4-STABLE #1: Sun Dec 16 11:48:31 CET 2001 root@monster.ikea.net:/usr/src/sys/compile/GATE i386


	
>Description:
There is no mechanism in /etc/rc.network6 for automatically loading IPv6 ipf rules like there is for IPv4
in /etc/rc.network. This means adding your own ipf rules for IPv6 cannot be done as smoothly as for IPv4.
>How-To-Repeat:
Enable IPF, default to deny: You don't have any clean way of configuring rules for ipf -6 in /etc/rc.conf.
>Fix:
Replicate the ipf-setup from /etc/rc.network, and change some variable names, e.g.
ipfilter_enable -> ipfilter6_enable etc. Be careful about checking whether ipmon or ipnat are
already running.
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200112220943.fBM9h4a26798>