Re: [SLUG] ip6tables config tutorial ... ?

2008-07-30 Thread Kyle



Alex Samad wrote:


remember there is not nat table in ipv6
  


Ahh!!

Thanks for the heads up Alex.

Kind Regards

Kyle

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ip6tables config tutorial ... ?

2008-07-29 Thread Alex Samad
On Wed, Jul 30, 2008 at 12:31:34PM +1000, Kyle wrote:
> Thanks Daniel,
>
> doing a CentOS 5.2 install, so I expect that to have been taken care of.
> 
> Kind Regards
>
> Kyle
>
>
>> Correct -- assuming you are running a sufficiently recent kernel that
>> the "IPv4 and IPv6 merge" happened in the iptables subsystem; if not I
>> strongly advise you to upgrade before you do more firewall work.
>>
>> Regards,
>> Daniel

remember there is not nat table in ipv6

>>   
> -- 
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
>

-- 
"I hope you leave here and walk out and say, 'What did he say?'"

- George W. Bush
08/13/2004
Beaverton, OR


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] ip6tables config tutorial ... ?

2008-07-29 Thread Kyle

Thanks Daniel,

doing a CentOS 5.2 install, so I expect that to have been taken care of.

Kind Regards

Kyle



Correct -- assuming you are running a sufficiently recent kernel that
the "IPv4 and IPv6 merge" happened in the iptables subsystem; if not I
strongly advise you to upgrade before you do more firewall work.

Regards,
Daniel
  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ip6tables config tutorial ... ?

2008-07-29 Thread Daniel Pittman
Kyle <[EMAIL PROTECTED]> writes:

> Can I ask has anyone come across a concise, clear ip6tables tutorial
> pls? And if so, can you point me to it?

There is no fundamental difference between firewalling IPv6 and IPv4
other than the small number of reserved/local address ranges, etc.

Any tutorial covering IPv4 and iptables can be trivially extended to
IPv6 by substituting the equivalent ip6tables command in most cases.

> Or is it simply a case of std. iptables rules (with the exception of a
> few - ipv6 specific - 'match' parameters) AND modules (namely
> ip_conntrack, ip_nat, etc.) just work with ip6tables so long as you
> obviously substitute any IP's you might have in your script with ipv6
> format addresses?

Correct -- assuming you are running a sufficiently recent kernel that
the "IPv4 and IPv6 merge" happened in the iptables subsystem; if not I
strongly advise you to upgrade before you do more firewall work.

Regards,
Daniel
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] ip6tables config tutorial ... ?

2008-07-29 Thread Kyle
Can I ask has anyone come across a concise, clear ip6tables tutorial 
pls? And if so, can you point me to it?


Or is it simply a case of std. iptables rules (with the exception of a 
few - ipv6 specific -  'match' parameters) AND modules (namely 
ip_conntrack, ip_nat, etc.) just work with ip6tables so long as you 
obviously substitute any IP's you might have in your script with ipv6 
format addresses?



--

Kind Regards

Kyle

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html