On 04/11/2016 11:10 AM, Tuomo Soini wrote: > On Mon, 11 Apr 2016 10:37:24 -0700 > Tom Eastep <[email protected]> wrote: > >>> For ipv4 this is not required. Question: do we just change order of >>> these for both or should we re-add actions for shorewall6? >> >> Let's just reverse the order of the rules. > > That is my suggestion too after checking icmp types in shorewall ipv4 > macro. > > But I'd suggest comment like this to action files: > > For IPv6 connectivity ipv6-icmp broadcasting is required so > AllowICMPs must be before silent broadcast Drop.
Agreed, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/ gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
