Date: Mon, 20 Dec 2004 21:55:29 -0800 From: Brooks Davis <brooks@one-eyed-alien.net> To: Charlie Schluting <charlie@schluting.com> Cc: freebsd-net@freebsd.org Subject: Re: firewalling with tunnels, and/or ipv6 Message-ID: <20041221055528.GA27519@odin.ac.hmc.edu> In-Reply-To: <41C784DC.5020805@schluting.com> References: <41C784DC.5020805@schluting.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--k1lZvvs/B4yU6o8G Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Dec 20, 2004 at 06:05:16PM -0800, Charlie Schluting wrote: > Ok, I've got a v6 tunnel, and to make it work I had to "allow ipv6 from= =20 > <endpoint>" in ipfw. From what I understand, I have to make a completely= =20 > different set of rules for ipv6, and load them using the -6 flag. >=20 > Correct so far? ip6fw is an entierly different beast from ipfw. There is no -6 option to ipfw. Use ip6fw instead. If 6.x we should have ipv6 support in ipfw and ip6fw should be gone. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --k1lZvvs/B4yU6o8G Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFBx7rQXY6L6fI4GtQRAkBNAJ9R16Bhddf/JIvsRnxbUZAZEOOoeACgtP/N d8KFGuf9ZPJIhLElywdb/tk= =z2Fz -----END PGP SIGNATURE----- --k1lZvvs/B4yU6o8G--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041221055528.GA27519>