Dear Dominic : What do you means for "stateful filtering" ?
In my case, I am using radvd to autoconfigure the Global Ipv6 address to other hosts. Autoconfigure by radvd are not statefull Ip address assignment in Ipv6. For my understanding , only DHCP6 is statefull assignment for Ipv6 address. So, for my case , should it be good enough to use Iptable6 ? I am confusing with the meaning on "stateful" between IP address assignment and stateful firewall . May be they are not related ( two different things). Please help me to understand this two things if you may help. Thanks, K. M. Lau --- Dominic Hargreaves <[EMAIL PROTECTED]> 說： > On Mon, Oct 24, 2005 at 05:32:15PM +0800, > [EMAIL PROTECTED] wrote: > > > I had running iptable on the tunnel gateway PC > for > > Ipv4. It give protection for Ipv4 network not > Ipv6. > > > > So, I need to set up a Ipv6 firewall in the Tunnel > > Gatway PC. > > > > Here is my questions : > > > > 1. Does the Debian Sarge Iptable also work for > Ipv6 ? > > You need to use the separate ip6tables package. > > > 2. I it does, what command line I need to add in > to > > the script file for my case ? > > You'll probably need different rules depending on > how your iptables is > set up, since ip6tables (at least without patching) > does not yet support > stateful filtering. You'll also obviously want to > use the IP6 addresses > in your script rather than the IPv4 ones. > > > 3. Can I add Ipv6 firewall rules into the same > Iptable > > script file which is working for Ipv4 currently ? > > If you've just used a hand-built shell script > there's no reason this > wouldn't work. > > Cheers, > > -- > Dominic Hargreaves | http://www.larted.org.uk/~dom/ > PGP key 5178E2A5 from the.earth.li > (keyserver,web,email) > > > -- > To UNSUBSCRIBE, email to > [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > _______________________________________ 想即時收到新 email 通知？ 下載 Yahoo! Messenger http://messenger.yahoo.com.hk -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
