Lost IPv6 with ipfw in latest stable

2006-08-14 Thread Kevin Oberman
For the first time since about may I have updated my 6-Stable system and my firewall seems badly broken with IPv6. 1. Any rule with me6 is rejected as an unknown host 2. A rule of allow ip from me to any still is blocking IPv6 3. I am seeing ICMPv6 type 135 blocked even though I have a rule to

Re: IPv6 and IPFW

2006-02-20 Thread Hajimu UMEMOTO
Hi, On Sun, 19 Feb 2006 10:55:17 -0800 Peter Losher [EMAIL PROTECTED] said: plosher Thanks, I see that now on my -STABLE boxes; is there any move to do the plosher same for dummynet? Yes, I've just committed the change for dummynet as well into HEAD, and I'll MFC it into RELENG_6. Thank you

Re: IPv6 and IPFW

2006-02-19 Thread Yar Tikhiy
On Sun, Feb 19, 2006 at 04:38:21PM +0900, Hajimu UMEMOTO wrote: Hi, On Sat, 18 Feb 2006 17:34:35 -0800 Peter Losher [EMAIL PROTECTED] said: plosher [1 text/plain; ISO-8859-1 (quoted-printable)] plosher Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not

Re: IPv6 and IPFW

2006-02-19 Thread Peter Losher
Hajimu UMEMOTO wrote: plosher Will this change in 6.1, or will we have to wait for ip6fw to be plosher completly removed before the module will support v6 by default? (You plosher would have to admit that it's somewhat confusing the way it is now) It was already MFC'ed into RELENG_6. So,

Re: IPv6 and IPFW

2006-02-18 Thread Peter Losher
Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled into kernel, ipfw does filterling an IPv6 as well. Will this change in 6.1, or will we have to wait for ip6fw to be completly removed before the

Re: IPv6 and IPFW

2006-02-18 Thread Max Laier
, that IPFW[2] is not a complete in-place replacement for IP6FW as IPFW2 syntax has diverted from the IPFW1/IP6FW syntax too much. I am unsure about the plans for IPFW+IPv6 in RELENG_6, HEAD certainly moves to removal of IP6FW, but more testers as required. Any datapoints with HEAD's version

Re: IPv6 and IPFW

2006-02-18 Thread Hajimu UMEMOTO
Hi, On Sat, 18 Feb 2006 17:34:35 -0800 Peter Losher [EMAIL PROTECTED] said: plosher [1 text/plain; ISO-8859-1 (quoted-printable)] plosher Hajimu UMEMOTO wrote: The ipfw in 6-STABLE has an IPv6 awareness, but it is not enabled as far as you use ipfw as a KLD module. If ipfw is compiled

IPv6 and IPFW

2006-02-08 Thread Neal Nelson
I've been trying to set up IPv6 and without ipfw my tunnel seems to work. However I cannot seem to setup ipfw to allow IPv6 to flow. Do I need to use ip6fw or just ipfw as that seems to accept ip6 protocols. If I need to use ip6fw then why does ipfw accept ip6 protocols? I'm using -STABLE

Re: IPv6 and IPFW

2006-02-08 Thread Hajimu UMEMOTO
Hi, On Wed, 8 Feb 2006 14:32:03 +0100 Neal Nelson [EMAIL PROTECTED] said: nealie I've been trying to set up IPv6 and without ipfw my tunnel seems to nealie work. However I cannot seem to setup ipfw to allow IPv6 to flow. Do I nealie need to use ip6fw or just ipfw as that seems to accept ip6