Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Dec 2008 22:01:59 +0100
From:      Ivan Voras <ivoras@freebsd.org>
To:        freebsd-net@freebsd.org
Subject:   6to4 in 6.3-R?
Message-ID:  <gi950h$91i$1@ger.gmane.org>

next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig4E5E09E75FB1BC0B7B050693
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

I'm toying around with IPv6 and one thing I'd like to try is to set up
an stf tunnel. The other types, like freenet6 and what sixxs uses work
without problems, but on a 7-stable machine. I've followed various
documents (like http://www.kfu.com/~nsayer/6to4/ but most are very
similar) and it apparently boils down to the following in /etc/rc.conf:

ipv6_enable=3D"YES"
ipv6_defaultrouter=3D"2002:c058:6301::"
stf_interface_ipv4addr=3D"my.permanent.ipv4.addr"

The interface comes up ok:

stf0: flags=3D1<UP> mtu 1280
        inet6 2002:a135:xxyy::1 prefixlen 16

but attempts to ping outside result in errors:

> ping6 www.freebsd.org
PING6(56=3D40+8+8 bytes) 2002:a135:xxyy::1 --> 2001:4f8:fff6::21
ping6: sendmsg: Permission denied
ping6: wrote www.freebsd.org 16 chars, ret=3D-1
ping6: sendmsg: Permission denied
ping6: wrote www.freebsd.org 16 chars, ret=3D-1
^C
--- www.freebsd.org ping6 statistics ---
2 packets transmitted, 0 packets received, 100.0% packet loss

It can ping6 itself. I have ipfw here but a very early rule says "allow
ipv6 from any to any". It's triggered, judging by the packet counts, but
apparently only in one direction (in the above example, only 2 packets
would be accounted for).

I think it's either broken (I can't try spf on the 7-stable machine) or,
more likely, I'm missing something since I'm new to ipv6. Any ideas?



--------------enig4E5E09E75FB1BC0B7B050693
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAklIF00ACgkQldnAQVacBcheewCgrEvAz241JxhX9o0aTx4U3Chy
xoUAn35ovZPavKH0bOb0BBeKGnPQQWfY
=390d
-----END PGP SIGNATURE-----

--------------enig4E5E09E75FB1BC0B7B050693--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?gi950h$91i$1>