Re: IPv6 and IPFW
Hi, On Sun, 19 Feb 2006 10:55:17 -0800 Peter Losher [EMAIL PROTECTED] said: plosher Thanks, I see that now on my -STABLE boxes; is there any move to do the plosher same for dummynet? Yes, I've just committed the change for dummynet as well into HEAD, and I'll MFC it into RELENG_6. Thank you for letting me know. Sincerely, -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan [EMAIL PROTECTED] [EMAIL PROTECTED],jp.}FreeBSD.org http://www.imasy.org/~ume/ ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPv6 and IPFW
On Sun, Feb 19, 2006 at 04:38:21PM +0900, Hajimu UMEMOTO wrote: Hi, On Sat, 18 Feb 2006 17:34:35 -0800 Peter Losher [EMAIL PROTECTED] said: plosher [1 text/plain; ISO-8859-1 (quoted-printable)] plosher Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled into kernel, ipfw does filterling an IPv6 as well. plosher Will this change in 6.1, or will we have to wait for ip6fw to be plosher completly removed before the module will support v6 by default? (You plosher would have to admit that it's somewhat confusing the way it is now) It was already MFC'ed into RELENG_6. So, ipfw.ko obeys the kernel config, now. Please note here that ipfw.ko obeys INET6 and IPSEC options, but not IPFIREWALL_* ones yet. The latter still are to be fixed for the module build. -- Yar ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPv6 and IPFW
Hajimu UMEMOTO wrote: plosher Will this change in 6.1, or will we have to wait for ip6fw to be plosher completly removed before the module will support v6 by default? (You plosher would have to admit that it's somewhat confusing the way it is now) It was already MFC'ed into RELENG_6. So, ipfw.ko obeys the kernel config, now. Thanks, I see that now on my -STABLE boxes; is there any move to do the same for dummynet? Best Wishes - Peter ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPv6 and IPFW
Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled into kernel, ipfw does filterling an IPv6 as well. Will this change in 6.1, or will we have to wait for ip6fw to be completly removed before the module will support v6 by default? (You would have to admit that it's somewhat confusing the way it is now) Best Wishes - Peter signature.asc Description: OpenPGP digital signature
Re: IPv6 and IPFW
On Sunday 19 February 2006 02:34, Peter Losher wrote: Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled into kernel, ipfw does filterling an IPv6 as well. Will this change in 6.1, or will we have to wait for ip6fw to be completly removed before the module will support v6 by default? (You would have to admit that it's somewhat confusing the way it is now) IPFW[2] has gained some IPv6 functionality lately and was supposed to replace IP6FW in the long run. It turned out, however, that IPFW[2] is not a complete in-place replacement for IP6FW as IPFW2 syntax has diverted from the IPFW1/IP6FW syntax too much. I am unsure about the plans for IPFW+IPv6 in RELENG_6, HEAD certainly moves to removal of IP6FW, but more testers as required. Any datapoints with HEAD's version of IPFW+IPv6 are much appreciated. -- /\ Best regards, | [EMAIL PROTECTED] \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED] / \ ASCII Ribbon Campaign | Against HTML Mail and News pgpgTJFoBAbbU.pgp Description: PGP signature
Re: IPv6 and IPFW
Hi, On Sat, 18 Feb 2006 17:34:35 -0800 Peter Losher [EMAIL PROTECTED] said: plosher [1 text/plain; ISO-8859-1 (quoted-printable)] plosher Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled into kernel, ipfw does filterling an IPv6 as well. plosher Will this change in 6.1, or will we have to wait for ip6fw to be plosher completly removed before the module will support v6 by default? (You plosher would have to admit that it's somewhat confusing the way it is now) It was already MFC'ed into RELENG_6. So, ipfw.ko obeys the kernel config, now. Sincerely, -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan [EMAIL PROTECTED] [EMAIL PROTECTED],jp.}FreeBSD.org http://www.imasy.org/~ume/ ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPv6 and IPFW
Hi,
On Wed, 8 Feb 2006 14:32:03 +0100
Neal Nelson [EMAIL PROTECTED] said:
nealie I've been trying to set up IPv6 and without ipfw my tunnel seems to
nealie work. However I cannot seem to setup ipfw to allow IPv6 to flow. Do I
nealie need to use ip6fw or just ipfw as that seems to accept ip6 protocols.
nealie If I need to use ip6fw then why does ipfw accept ip6 protocols?
nealie I'm using -STABLE from yesterday.
The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as
far as you use ipfw as a KLD module. If ipfw is compiled into kernel,
ipfw does filterling an IPv6 as well.
If you wish to enable an IPv6 support of ipfw as an KLD module, put
following lines into your /etc/make.conf and rebuild ipfw.ko:
.if ${.CURDIR} == /usr/src/sys/modules/ipfw
CFLAGS+=-DINET6
.endif
If you don't want to filter an IPv6 by ipfw, and want to filter an
IPv6 by ip6fw, please add following rule in your ipfw rule:
add pass ip6 from any to any
Sincerely,
--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
[EMAIL PROTECTED] [EMAIL PROTECTED],jp.}FreeBSD.org
http://www.imasy.org/~ume/
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]
