Louis Lagendijk wrote:
> hello Tom,
> Thanks for your effort on the IPv6 support. I find it amzing how productive 
> you are!
> 
> I have the rpm versions of 4.3.1 installed
> 
> I would like to give some feeback on the IPv6 support. So far I have used 
> 6wall, but 
> I am not exactly up to date on IPv6 support in Linux, so please bear with me 
> if I 
> make silly mistakes:
> 
> 1) The IP_FORWARDING option 4.3.1 is not accepted:
> WARNING: Unknown configuration option (IP_FORWARDING) ignored : 
> /etc/shorewall6/shorewall6.conf (line 94)
> 
> 2) On my (Centos5) there are some lines in macro.AllowICMPs that are not 
> accepted. 
> At the end there are a number of lines where protocol icpv6-icmp is used. 
> This protocol is not in the 
> /etc/protocols file, and I could not find any info on it on the internet. The 
> port values seem to suggest
> that this is normal icmpv6. Comments?

The 'icpv6' is a typo which will be corrected in 4.3.2. In the mean
time, you can work around the problem by invoking the macro with
'icmpv6' in the PROTO column (or whatever your /etc/protocols file
defines for protocol 58).

> 
> 3) /usr/share/shorewall6/modules file is the same as for ipv4. Did you miss 
> to include the ipv6 version?
> I copied the modules6 file from 6wall info /etc/shorewall6, but that does not 
> work either

This is alpha software -- there are a lot of things that haven't been
done yet including modifying the modules file for IPv6. What exactly
doesn't work that makes you complain about the file?

-Tom
-- 
Tom Eastep        \ The ultimate result of shielding men from the
Shoreline,         \ effects of folly is to fill the world with fools.
Washington, USA     \                                 -Herbert Spencer
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to