From owner-freebsd-ipfw@FreeBSD.ORG Fri Feb 4 17:56:10 2011 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EC9D21065672 for ; Fri, 4 Feb 2011 17:56:09 +0000 (UTC) (envelope-from julian@freebsd.org) Received: from vps1.elischer.org (vps1.elischer.org [204.109.63.16]) by mx1.freebsd.org (Postfix) with ESMTP id A76858FC15 for ; Fri, 4 Feb 2011 17:56:09 +0000 (UTC) Received: from julian-mac.elischer.org (home-nat.elischer.org [67.100.89.137]) (authenticated bits=0) by vps1.elischer.org (8.14.4/8.14.4) with ESMTP id p14HYZqW025253 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 4 Feb 2011 09:34:39 -0800 (PST) (envelope-from julian@freebsd.org) Message-ID: <4D4C38AD.9000709@freebsd.org> Date: Fri, 04 Feb 2011 09:34:37 -0800 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: Michael Scheidell References: <201102041630.p14GUIf8031646@freefall.freebsd.org> In-Reply-To: <201102041630.p14GUIf8031646@freefall.freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-ipfw@freebsd.org Subject: Re: kern/128260: [ipfw] [patch] ipfw_divert damages IPv6 packets X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Feb 2011 17:56:10 -0000 On 2/4/11 8:30 AM, Michael Scheidell wrote: > The following reply was made to PR kern/128260; it has been noted by GNATS. > > From: Michael Scheidell > To: > Cc: > Subject: Re: kern/128260: [ipfw] [patch] ipfw_divert damages IPv6 packets > Date: Fri, 4 Feb 2011 11:21:16 -0500 > > since the last ipv4 block was released yesterday, how about a 'ping' for > getting ipv6 working in ipfw_divert? "oh, allright...." (since I did the original divert I guess it's a reasonable cause...) :-) I guess I need to learn that IPV6 stuff some time. > > an example: snort with inline, and/or snort 2.9.0 with daq and inline. > snort (by itself) is fully ipv6 ready, with a cravat about ipv6 and ipfw. > > so, ping! > > -- > Michael Scheidell, CTO > o: 561-999-5000 > d: 561-948-2259 > ISN: 1259*1300 > >*| *SECNAP Network Security Corporation > > * Certified SNORT Integrator > * 2008-9 Hot Company Award Winner, World Executive Alliance > * Five-Star Partner Program 2009, VARBusiness > * Best in Email Security,2010: Network Products Guide > * King of Spam Filters, SC Magazine 2008 > > ______________________________________________________________________ > This email has been scanned and certified safe by SpammerTrap(r). > For Information please see http://www.secnap.com/products/spammertrap/ > ______________________________________________________________________ > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >