[Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-12-21 Thread Launchpad Bug Tracker
This bug was fixed in the package ufw - 0.24 --- ufw (0.24) jaunty; urgency=low * debian/rules: check for 'nocheck' in DEB_BUILD_OPTIONS * debian/postrm: don't fail if iptables or ip6tables fails (LP: #278670) * fix typo in error message (LP: #280348) * allow case-insensitive

Re: [Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-12-15 Thread Jamie Strandboge
On Sun, 14 Dec 2008, Ryan Giobbi wrote: Thanks for the update, a typo in my original report: -m hl --hl-eq 255 should be -m hl --hl-eq 64 Before committing, I read section 4.2 of http://tools.ietf.org/html/rfc4890 and came to the conclusion that 255 is the correct value for NDP messages.

[Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-12-14 Thread Ryan Giobbi
Thanks for the update, a typo in my original report: -m hl --hl-eq 255 should be -m hl --hl-eq 64 An ip6tables guide that might be useful is here: http://tools.ietf.org/html/rfc4890#appendix-B -- UFW default ICMPv6 before6.rules modification https://bugs.launchpad.net/bugs/299268 You received

[Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-12-12 Thread Jamie Strandboge
Thank you for using Ubuntu and taking the time to report a bug. This will be included in the next release of ufw. ** Changed in: ufw (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) Status: New = Triaged -- UFW default ICMPv6 before6.rules modification

[Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-12-12 Thread Jamie Strandboge
** Changed in: ufw (Ubuntu) Status: Triaged = Fix Committed -- UFW default ICMPv6 before6.rules modification https://bugs.launchpad.net/bugs/299268 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 299268] Re: UFW default ICMPv6 before6.rules modification

2008-11-17 Thread Ryan Giobbi
RFC 4861 specifies that NDP messages shouldn't be passed through routers. Also, host (non-router) systems shouldn't need the -A ufw6-before-input -p icmpv6 --icmpv6-type router-solicitation -j ACCEPT rule as they send router solicitations, they don't need to receive them. -- UFW default