Package: arno-iptables-firewall
Version: 1.9.2.k-4
With the ipmasq package gone the way of the dodo, I needed NAT
functionality on a computer w/ a first-class IPv4 address to run an
iodine server on that host. That host already had IPv6 connectivity
using the auto6to4 package (in experimental) which sets up a standard
6to4 tunnel to the standard IPv4 anycast address, which uses IPv4
protocol 41 packets. (Note, *protocol* 41, not port 41.)
Installing arno-iptables-firewall and configuring it for NAT
functionality and *nothing else* blocked the IPv4 protocol 41 packets
and thus killed the 6to4 tunnel. When I tried the miredo package
instead, that was also broken, for similar reasons.
It would be nice if arno-iptables-firewall had a "NAT and no blocking"
option, so it could be used as a plug-in replacement for ipmasq, and
would be guaranteed not to mess up IPv6 connectivity via IPv4
tunnels. Or at least, if there were documentation.
(Of course, this was on a "stable" machine running an old version. If
this is fixed in more recent versions --- it doesn't seem to be
judging from just changelog entries --- my apologies.)
--Barak.
--
Barak A. Pearlmutter
Hamilton Institute & Dept Comp Sci, NUI Maynooth, Co. Kildare, Ireland
http://www.bcl.hamilton.ie/~barak/
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
