> On Thu, 31 Jul 2003 16:11:24 -0400 > "Newman, David" <[EMAIL PROTECTED]> wrote: > > > > > I'm seeing strange behaviour with IPFilter and > > Solaris 6to4 tunnels (which are now available with > > Solaris 9 Update 3). > > Hmmm, Think, > > I've setup IPv6 tunnels with Sol8, you'll have to remember to > open your > phisical interface the tunnel is coming in on for protocol > type 41 from the > tunnel endpoint t your ipv4 ip, else, the tunnel itself is blocked.... >
Yeah, IPFilter is working fine on the physical interfaces so when I was setting it up I started getting these 25/07/2003 22:01:11.947489 qfe0 @0:4 b 206.228.196.6 -> 131.107.65.121 PR ipv6 len 20 (124) OUT and so I added these rules to the IPv4 ipf.conf file. pass out quick on qfe0 proto ipv6 from 206.228.196.6/32 to any pass in quick on qfe0 proto ipv6 from any to 206.228.196.6/32 At that point the tunnel is working, however, ignores any of the IPv6 rules. Once IPFilter finally attaches to the tunnel interface all trafic through the tunnel dies without a peep. -Dave
