Date: Fri, 05 Oct 2007 11:31:24 -0700 From: "Kevin Oberman" <oberman@es.net> To: Julian Elischer <julian@elischer.org> Cc: freebsd-current@freebsd.org Subject: Re: IPv6 support for tables in ipfw? Message-ID: <20071005183124.3619C4500E@ptavv.es.net> In-Reply-To: Your message of "Fri, 05 Oct 2007 11:02:22 PDT." <47067C2E.906@elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--==_Exmh_1191609084_12334P Content-Type: text/plain; charset=us-ascii Content-Disposition: inline > Date: Fri, 05 Oct 2007 11:02:22 -0700 > From: Julian Elischer <julian@elischer.org> > > Kevin Oberman wrote: > > At this time the use of tables in ipfw is limited to IPv4. Is anyone > > looking at adding IPv6 address capability? > > > I am > but it's not 'soon' on my list. I am on travel for a couple of weeks, so I may try and get a start on this while at airports or on planes. Tables are very useful for allowing an IDS set up blocks on the fly. Right now I am limited to a new rule for every block and that is not very portable (since I don't want to step on existing rules) and very messy since, except for the address, all of the rules are identical. I'm using tables right now for V4, but I really need to have v6 support soon. I'm just not real sure what 'soon' is. I hope it's different from yours. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751 --==_Exmh_1191609084_12334P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) Comment: Exmh version 2.5 06/03/2002 iD8DBQFHBoL8kn3rs5h7N1ERAnX8AKCZ8GqL3svys9acAfdEAXbc2c4NngCeKgWU CNcom7dM3rcd/h1GELA9UOw= =Bz1/ -----END PGP SIGNATURE----- --==_Exmh_1191609084_12334P--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071005183124.3619C4500E>