Am Montag, 29. Januar 2007 09:26 schrieb Dirk Nehring: [...] > It seems that IPV6 is of much interest. What do you think to add an > additional switch in package/Config.in like "FWRT_IPV6" where we can > switch generic IPV6 support on (default should be still of). Most users > do not care about IPV6, so they can save space. If you enable the flag, > generic IPV6 support will be switch on along with the most important > packages.
In general this is a good idea, but you have to know that basicly only kmod-ipv6 is really needed for a minimal, but working ipv6 setup (+ the usual but essential tools like "ip", which might be needed). Linux normally loads the ipv6 module (if present at all), and if ipv6 is loaded, then by default the autoconf procedure starts immidently after an interface has been brought up. So, the "FWRT_IPV6" switch would need to disable or enable kmod-ipv6. To help the user a bit, maybe some additional software like "ip6tables" could get installed automaticly, but basicly the only real important thing is the ipv6 kernel module. I am not sure which packages are really important enough to get installed everytime FWRT_IPV6 was selected. Is radvd really needed for all setups? Does the people want traceroute6/ping6 on such systems? What about ip6tables and so on... We might think of some additional /proc settings (maybe even configured within /etc/network/interface using the little ipv6 hooks from if-up.d). If "FWRT_IPV6" is set, then it might be clever to set ipv6 forwarding to 1 as well, because for ipv4 forwarding seems to be enabled by default on freewrt. besides having the same settings for ipv4 an ipv6, enabling forwarding for ipv6 also disabled autoconf, accept-*, which might be more secure anyways. To think even further, we might also add some ipv6 specific rules to the freewrt firewall, when FWRT_IPV6 is enabled. A lot of small stuff that could be interessting, but I am not sure about what is really needed. Ipv6 is still only used by some nerds in their network playgrounds, but these playgrounds might not reflect the needs of a real working ipv6 setup. As long as there is almost no provider with real ipv6 for customers, this technique will not really grow any further from this point on (at least in europe). --Ralph _______________________________________________ freewrt-developers mailing list [email protected] https://www.freewrt.org/lists/listinfo/freewrt-developers
