Your message dated Sun, 18 Dec 2011 19:55:27 -0500
with message-id <[email protected]>
and subject line Re: Bug#652570: shorewall6: Spurious "ICMP not permitted in an
IPv6 configuration"
has caused the Debian Bug report #652570,
regarding shorewall6: Spurious "ICMP not permitted in an IPv6 configuration"
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
652570: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652570
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: shorewall6
Version: 4.4.11.6-1
Severity: normal
Despite what the documentation says, the keyword "icmp" (or a variant
such as "icmp6" or "icmpv6") is not recognized in rules:
ERROR: ICMP not permitted in an IPv6 configuration : /etc/shorewall6/rules
(line 462)
You have to use the numeric value of the protocol, 58.
-- System Information:
Debian Release: 6.0.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=fr_FR (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Versions of packages shorewall6 depends on:
ii debconf [debconf-2.0] 1.5.36.1 Debian configuration management sy
ii iproute 20100519-3 networking and traffic control too
ii iptables 1.4.8-3 administration tools for packet fi
ii libio-socket-inet6-perl 2.65-1.1 Object interface for AF_INET6 doma
ii shorewall 4.4.11.6-3 Shoreline Firewall, netfilter conf
shorewall6 recommends no packages.
Versions of packages shorewall6 suggests:
ii linux-image-2.6.32-5-686 [lin 2.6.32-39 Linux 2.6.32 for modern PCs
ii make 3.81-8 An utility for Directing compilati
pn shorewall-doc <none> (no description available)
-- Configuration Files:
/etc/default/shorewall6 changed:
startup=1
OPTIONS=""
-- debconf information:
shorewall6/major_release:
shorewall6/dont_restart:
shorewall6/invalid_config:
--- End Message ---
--- Begin Message ---
On Sun, Dec 18, 2011 at 06:45:56PM +0100, Stephane Bortzmeyer wrote:
> Package: shorewall6
> Version: 4.4.11.6-1
> Severity: normal
>
>
> Despite what the documentation says, the keyword "icmp" (or a variant
> such as "icmp6" or "icmpv6") is not recognized in rules:
>
> ERROR: ICMP not permitted in an IPv6 configuration : /etc/shorewall6/rules
> (line 462)
>
> You have to use the numeric value of the protocol, 58.
>
This is an artifact of this entry in /etc/protocols:
ipv6-icmp 58 IPv6-ICMP # ICMP for IPv6
You can use either "58" or "ipv6-icmp".
Regards,
-Roberto
--
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
--- End Message ---