> > to some documentation and/or examples on how to enable ipfilter on Solaris
> > ip.6to4tun0 tunneling interfaces. I basically want to have a working
>
> Try doing a plumb for this interface name:
>
> ip.ip6to4tun.pfil0

Hmm.. Ok, I renamed /etc/hostname6.ip.6to4tun0 to
/etc/hostname6.ip.6to4tun.pfil0 and rebooted. That interface
comes up, but no traffic seems to pass thru it afterwards...
(which is good from a firewalling point of view, but bad from a
usage point of view :-)

Do I need to add anything to /etc/opt/iu.ap?

I tried it both without anything at all in ipf.conf (regarding that
tunneling interface) and this:

pass in on ip.6to4tun.pfil0 all head 400
pass out on ip.6to4tun.pfil0 all head 450


Relevant parts of the original config:

ip.6to4tun0: flags=2200041<UP,RUNNING,NONUD,IPv6> mtu 1480 index 8
        inet tunnel src 81.216.104.103
        tunnel hop limit 60
        inet6 2002:51d8:6867::1/64


Routing Table: IPv6
Destination/Mask            Gateway                     If
--------------------------- --------------------------- ----- --- ------
-----
fec0:0:0:ffff::/64          fec0:0:0:ffff::1            qfe0:2
2002:51d8:6867:1::/64       2002:51d8:6867:1:a00:20ff:fe8f:9300 qfe0:1
2002:51d8:6867:2::/64       2002:51d8:6867:2:a00:20ff:fe8f:9301 qfe1:1
2002:51d8:6867::/64         2002:51d8:6867::1           ip.6to4tun0
2002::/16                   2002:51d8:6867::1           ip.6to4tun0
fe80::/10                   fe80::a00:20ff:fe8f:9300    qfe0
fe80::/10                   fe80::a00:20ff:fe8f:9301    qfe1
ff00::/8                    fe80::a00:20ff:fe8f:9300    qfe0
default                     2002:c058:6301::



--
Peter Eriksson <[EMAIL PROTECTED]>

Reply via email to