On Thu, 31 Jul 2003 16:11:24 -0400 "Newman, David" <[EMAIL PROTECTED]> wrote:
> > I'm seeing strange behaviour with IPFilter and > Solaris 6to4 tunnels (which are now available with > Solaris 9 Update 3). When the system comes up > IPFilter doesn't attach to the tunnel interface, > in this case ip.6to4tun0, and it doesn't block > packets. So even though my ipf6.conf has only > > block in log all > block out log all > > I can still ping ipv6.research.microsoft.com > > Then I run /etc/init.d/ipfboot reipf and I see > this output: > > attach to [ip.6to4tun0,0] - IPv6 > > Now the pings don't work, but nothing is logged. > When I add > pass out quick proto ipv6-icmp from any to any icmp-type 128 keep state > and reload it still doesn't work and nothing is logged. > > Is IPFilter not compatible with 6to4 tunnels yet? > I am using IPFilter 3.4.32 > > -Dave > > Hmmm, Think, I've setup IPv6 tunnels with Sol8, you'll have to remember to open your phisical interface the tunnel is coming in on for protocol type 41 from the tunnel endpoint t your ipv4 ip, else, the tunnel itself is blocked.... -- Met vriendelijke groeten, Remco Post SARA - Stichting Academisch Rekencentrum Amsterdam http://www.sara.nl High Performance Computing Tel. +31 20 592 8008 Fax. +31 20 668 3167 "I really didn't foresee the Internet. But then, neither did the computer industry. Not that that tells us very much of course - the computer industry didn't even foresee that the century was going to end." -- Douglas Adams
