Re: [Shorewall-users] NPTv6

2017-01-09 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/07/2017 07:57 PM, Luke Jordan wrote: > Am 07.01.2017 um 18:11 schrieb Tom Eastep: >> I have two providers, IPv6Beta and HE. >> >> /etc/shorewall6/shorewall6.conf: >> >> USE_DEFAULT_RT=Yes >> >> /etc/shorewall6/providers: >> >> IPv6Beta 1

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Luke Jordan
Am 07.01.2017 um 21:30 schrieb Tom Eastep: > That should be :T, not :P sorry, my fail. with :t it is running. -- Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org!

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Luke Jordan
Am 07.01.2017 um 18:11 schrieb Tom Eastep: > I have two providers, IPv6Beta and HE. > > /etc/shorewall6/shorewall6.conf: > > USE_DEFAULT_RT=Yes > > /etc/shorewall6/providers: > > IPv6Beta 1 0x100 - eth0 fe80::22e5:2aff:feb7:f2cf\ >

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/07/2017 10:19 AM, Luke Jordan wrote: > Am 07.01.2017 um 18:38 schrieb Tom Eastep: Did you add DNPT as a nat builtin action in /etc/shorewall6/actions? >> >> I meant 'mangle' rather than 'nat'. > > sure > > # shorewall6 show

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Luke Jordan
Am 07.01.2017 um 18:38 schrieb Tom Eastep: >>> Did you add DNPT as a nat builtin action in >>> /etc/shorewall6/actions? > > I meant 'mangle' rather than 'nat'. sure # shorewall6 show actions A_AllowICMPs# Audited Accept needed ICMP6 types A_Drop #

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/07/2017 09:23 AM, Tom Eastep wrote: > On 01/07/2017 09:11 AM, Tom Eastep wrote: >> On 01/07/2017 08:35 AM, Luke Jordan wrote: > > >>> it doesn't work: > >>> /etc/shorewall6/mangle: MARK(768):P eth0- tcp >>>

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/07/2017 09:11 AM, Tom Eastep wrote: > On 01/07/2017 08:35 AM, Luke Jordan wrote: > >> it doesn't work: > >> /etc/shorewall6/mangle: MARK(768):P eth0- tcp >> 22,47238,52486 >> # ssh traffic by dsl

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/07/2017 08:35 AM, Luke Jordan wrote: > Am 26.12.2016 um 22:44 schrieb Tom Eastep: >> >> My personal approach to multiple IPv6 providers is to assign my >> local networks prefixes delegated from one of my provider's >> routers and simply use

Re: [Shorewall-users] NPTv6

2017-01-07 Thread Luke Jordan
Am 26.12.2016 um 22:44 schrieb Tom Eastep: >> I assume he wants to use NPT (Network Prefix Translation) to avoid >> the complications of multihoming systems with multiple IPv6 >> providers. this is correct. i wish to have a solution to use two providers with different ipv6-prefixes with the

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/26/2016 01:44 PM, Tom Eastep wrote: > On 12/26/2016 01:12 PM, Simon Hobson wrote: >> Tuomo Soini wrote: > >>> What do you mean with NPTv6 ? > >> I assume he wants to use NPT (Network Prefix Translation) to >> avoid the

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/26/2016 01:12 PM, Simon Hobson wrote: > Tuomo Soini wrote: > >> What do you mean with NPTv6 ? > > I assume he wants to use NPT (Network Prefix Translation) to avoid > the complications of multihoming systems with multiple

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/26/2016 12:33 PM, Tuomo Soini wrote: > On Mon, 26 Dec 2016 08:15:49 +0100 Luke Jordan > wrote: > >> Hi, >> >> it is possible to use NPTv6 for a multi-homing setup with >> shorewall6? > > What do you mean with NPTv6 ? >

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tuomo Soini
On Mon, 26 Dec 2016 08:15:49 +0100 Luke Jordan wrote: > Hi, > > it is possible to use NPTv6 for a multi-homing setup with shorewall6? What do you mean with NPTv6 ? -- Tuomo Soini Foobar Linux services +358 40 5240030 Foobar Oy

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/26/2016 09:59 AM, Luke Jordan wrote: > Am 26.12.2016 um 18:01 schrieb Tom Eastep: >>> it is possible to use NPTv6 for a multi-homing setup with >>> shorewall6? >> >> Sure. > > really? wow ... documentation? > How do you plan to configure

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Luke Jordan
Am 26.12.2016 um 18:01 schrieb Tom Eastep: >> it is possible to use NPTv6 for a multi-homing setup with >> shorewall6? > > Sure. really? wow ... documentation? -- Developer Access Program for Intel Xeon Phi Processors

Re: [Shorewall-users] NPTv6

2016-12-26 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/25/2016 11:15 PM, Luke Jordan wrote: > Hi, > > it is possible to use NPTv6 for a multi-homing setup with > shorewall6? > Sure. - -Tom - -- Tom Eastep\ When I die, I want to go like my Grandfather who Shoreline, \ died

[Shorewall-users] NPTv6

2016-12-25 Thread Luke Jordan
Hi, it is possible to use NPTv6 for a multi-homing setup with shorewall6? -- Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel