Date: Mon, 20 Apr 2009 20:35:54 +0400 From: Stanislav Sedov <stas@deglitch.com> To: freebsd-security@freebsd.org Cc: ipfreak@yahoo.com Subject: Re: ipv6 and ipfw Message-ID: <20090420203554.96141565.stas@deglitch.com> In-Reply-To: <147404.54014.qm@web52106.mail.re2.yahoo.com> References: <200902100012.n1A0CHLr027615@drugs.dv.isc.org> <147404.54014.qm@web52106.mail.re2.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 9 Feb 2009 17:29:11 -0800 (PST)
gahn <ipfreak@yahoo.com> wrote:
>
> Thanks Mark:
>
> my machine would load the modules when the system boots up. here is my rc.conf:
>
> firewall_enable="YES"
> firewall_script="/etc/ipfw.conf"
> firewall_logging="YES"
>
> does that matter?
Your system's ipfw definitely supports ipv6. You can use the same
firewall script to set up ipv6 rules as well.
Note, however, that there's a different set of sysctl exists to
control ip6fw, namely net.inet6.ip6.fw. Thus to enable it at the
boot time you certainly need to add ipv6_firewall_enable="YES"
into your rc.conf. There're also a bunch of other IPv6 related
configurational options exist:
ipv6_firewall_enable="NO" # Set to YES to enable IPv6 firewall
# functionality
ipv6_firewall_script="/etc/rc.firewall6" # Which script to run to set
up the IPv6 firewall
ipv6_firewall_type="UNKNOWN" # IPv6 Firewall type (see /etc/rc.firewall6)
ipv6_firewall_quiet="NO" # Set to YES to suppress rule display
ipv6_firewall_logging="NO" # Set to YES to enable events logging
--
Stanislav Sedov
ST4096-RIPE
!DSPAM:49eca46b967004490364599!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090420203554.96141565.stas>