-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 12/31/2016 05:39 AM, Sven Kirmess wrote: > I'm trying to find out what the recommended way would be to > restart shorewall6. I found <http://shorewall.org/dhcp.htm> but I'm > not 100% sure if that applies to shorewall6 too. > > On my firewall I run dhcpcd, which > > - configures an IPv6 address on ppp0, according to a router > advertisment > > dhcpcd[25267]: ppp0: Router Advertisement from > fe80::226:cbff:fe9d:4c1b dhcpcd[25267]: ppp0: adding address > 2a02:200:2f00:91d:31da:4c2d:2f89:d379/64 dhcpcd[25267]: ppp0: > pltime 604800 seconds, vltime 2592000 seconds dhcpcd[25267]: ppp0: > executing `//libexec/dhcpcd-run-hooks' ROUTERADVERT > > - requests a /60 network with DHCPv6-PD and assigns an IPv6 > network to internal interfaces. > > dhcpcd[25267]: ppp0: broadcasting RENEW6 (xid 0xb2b730), next in > 9.7 seconds dhcpcd[25267]: ppp0: REPLY6 received from > fe80::226:cbff:fe9d:4c1b dhcpcd[25267]: ppp0: renew in 3600, rebind > in 5760, expire in 86400 seconds dhcpcd[25267]: ppp0: writing lease > `/var/db/dhcpcd-ppp0.lease6' dhcpcd[25267]: ppp0: delegated prefix > 2a02:200:2e00:91d0::/60 dhcpcd[25267]: em2.100: adding address > 2a02:200:2e00:91d4::1/64 dhcpcd[25267]: em2.100: pltime 7200 > seconds, vltime 86400 seconds dhcpcd[25267]: em2.100: executing > `//libexec/dhcpcd-run-hooks' DELEGATED6 dhcpcd[25267]: em2.170: > adding address 2a02:200:2e00:91da::1/64 dhcpcd[25267]: em2.170: > pltime 7200 seconds, vltime 86400 seconds dhcpcd[25267]: em2.170: > executing `//libexec/dhcpcd-run-hooks' DELEGATED6 dhcpcd[25267]: > em2.191: adding address 2a02:200:2e00:91db::1/64 dhcpcd[25267]: > em2.191: pltime 7200 seconds, vltime 86400 seconds dhcpcd[25267]: > em2.191: executing `//libexec/dhcpcd-run-hooks' DELEGATED6 > dhcpcd[25267]: em2.192: adding address 2a02:200:2e00:91dc::1/64 > dhcpcd[25267]: em2.192: pltime 7200 seconds, vltime 86400 seconds > dhcpcd[25267]: em2.192: executing `//libexec/dhcpcd-run-hooks' > DELEGATED6 dhcpcd[25267]: em2.193: adding address > 2a02:200:2e00:91dd::1/64 dhcpcd[25267]: em2.193: pltime 7200 > seconds, vltime 86400 seconds dhcpcd[25267]: em2.193: executing > `//libexec/dhcpcd-run-hooks' DELEGATED6 dhcpcd[25267]: ppp0: > executing `//libexec/dhcpcd-run-hooks' RENEW6 > > Should I restart shorewall6? And if yes, on which event?
We can't answer that without knowing if your Shorewall6 configuration is dependent on the IPv6 address of ppp0 or the IPv6 local network address. If it isn't, then there is no reason to *reload* (there is never a need to *restart* in this case) > > The networks should be static but I don't trust my ISP to tell me > if he changes them. What's the worst thing that can happen if a > restart does not happen? If your ruleset contains rules that are dependent on the above-mentioned addresses, then those rules will cease to match. - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYZ/azAAoJEJbms/JCOk0QQrQQAJz370qllS+CtmjqkXKmrtHi Q0dEzDrNPO85n9B1YdKR5KpoeyE0uYZGQMW6icqhH0r+m66S8qEUv58L1q/vu1wb vDk3YjOh5bm4E/tuznmr/PkyHC9piUMzfzqE9dpeIdVRQWP1n/XDqLBK6HtpOzvJ 6D9v80gFRMZ2Ka6GWGJ5o12iEYNbVVDgZnsWjvIK8u/gsFiq6JA2jTxenYiFAWlP 0ZtDc3yVnAg2himcIThJKipPCYm5CzdoyUN1o1biB1rynNscwIy1B9Jc8tR8FfhN yrGJf3DyryH2e+7PFNXMQC85ROrP3opzI1RIJbqqgkMRB5SlwAPJEkEOV8cio2f8 cUsbCbLAbHZkgRpPUZWfRrPsHt+GbVDNyDE/lT/OT0Fbx0UX8zwErNs+wmxelg+v kDjLGTHIVhUUza+Kmq69DSNh3xtKlBMrwzzU3slZ3NvSGBVSSTaqPf890iQZG6Nx rZgxQCbrv5aN62C5qMmDd14FLwwQGYb1agKDb0RCejlaPsoMsMwzwmKzG6YjdAT4 QdAEtVnf4URpZwkNOTA+QQZG6JnHSidcI6R+3lKMIUUlD4DUu818tzGYxL3qwhUq 67aqc79pf8B27duJoWtGgLxkYsQ9sHOcMLAEHdaUBsHExieWobHEwqD01exb8lrJ 6z1tt3zzfBHrw90lJhAp =UGBi -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
