On Mon, 11 Apr 2016 10:37:24 -0700
Tom Eastep <[email protected]> wrote:

> > For ipv4 this is not required. Question: do we just change order of
> > these for both or should we re-add actions for shorewall6?
> 
> Let's just reverse the order of the rules.

That is my suggestion too after checking icmp types in shorewall ipv4
macro.

But I'd suggest comment like this to action files:

For IPv6 connectivity ipv6-icmp broadcasting is required so
AllowICMPs must be before silent broadcast Drop.

-- 
Tuomo Soini <[email protected]>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>

Attachment: pgpsP6M22PW3Q.pgp
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/
gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to