From owner-freebsd-security@FreeBSD.ORG Tue Feb 10 00:12:34 2009 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 30A72106564A for ; Tue, 10 Feb 2009 00:12:34 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from mx.isc.org (mx.isc.org [IPv6:2001:4f8:0:2::1c]) by mx1.freebsd.org (Postfix) with ESMTP id 12BB18FC16 for ; Tue, 10 Feb 2009 00:12:34 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "farside.isc.org", Issuer "ISC CA" (verified OK)) by mx.isc.org (Postfix) with ESMTPS id 9F0D511404F; Tue, 10 Feb 2009 00:12:20 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (not verified)) by farside.isc.org (Postfix) with ESMTP id EC4CDE6069; Tue, 10 Feb 2009 00:12:19 +0000 (UTC) (envelope-from marka@isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id n1A0CHLr027615; Tue, 10 Feb 2009 11:12:17 +1100 (EST) (envelope-from marka@drugs.dv.isc.org) Message-Id: <200902100012.n1A0CHLr027615@drugs.dv.isc.org> To: ipfreak@yahoo.com From: Mark Andrews In-reply-to: Your message of "Mon, 09 Feb 2009 15:22:37 -0800." <416026.72989.qm@web52103.mail.re2.yahoo.com> Date: Tue, 10 Feb 2009 11:12:17 +1100 Sender: Mark_Andrews@isc.org X-Spam-Status: No, score=-3.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, SARE_SUB_RAND_LETTRS4 autolearn=no version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx.isc.org Cc: freebsd security Subject: Re: ipv6 and ipfw X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2009 00:12:34 -0000 In message <416026.72989.qm@web52103.mail.re2.yahoo.com>, gahn writes: > Thanks Mark: > > Sorry I am using FreeBSD 7.1. > > Best FreeBSD 6's ipfw has IPv6 support so I presume 7's does as well. Note I build my kernel with the following options as I want forwarding. options IPFIREWALL options IPFIREWALL_FORWARD Mark > --- On Mon, 2/9/09, Mark Andrews wrote: > > > From: Mark Andrews > > Subject: Re: ipv6 and ipfw > > To: ipfreak@yahoo.com > > Cc: "freebsd security" > > Date: Monday, February 9, 2009, 3:14 PM > > In message > > <856498.31257.qm@web52106.mail.re2.yahoo.com>, gahn > > writes: > > > Hi all: > > > > > > I have a station that has multiple interfaces. Some of > > interfaces run both ip > > > v4 and ipv6. checked with man pages of rc.conf and it > > seems to be telling me > > > that ipfw for ipv4 and ipv6 are two different > > processes and need two differen > > > t scripts. > > > > > > Is it correct? Or anyone here can direct me for the > > web sites with more infor > > > mation? > > > > > > Thanks > > > > The answer to that is version specific. IPFW2 includes > > support for IPv6 as well as IPv4 though not all the > > features > > are supported for IPv6. > > > > Mark > > -- > > Mark Andrews, ISC > > 1 Seymour St., Dundas Valley, NSW 2117, Australia > > PHONE: +61 2 9871 4742 INTERNET: > > Mark_Andrews@isc.org > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to > > "freebsd-security-unsubscribe@freebsd.org" > > > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org