From owner-freebsd-security@FreeBSD.ORG Tue Feb 10 01:29:11 2009 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E743F106564A for ; Tue, 10 Feb 2009 01:29:11 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: from web52106.mail.re2.yahoo.com (web52106.mail.re2.yahoo.com [206.190.48.109]) by mx1.freebsd.org (Postfix) with SMTP id A45148FC14 for ; Tue, 10 Feb 2009 01:29:11 +0000 (UTC) (envelope-from ipfreak@yahoo.com) Received: (qmail 55099 invoked by uid 60001); 10 Feb 2009 01:29:11 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Message-ID; b=OUDJQN8sc1i6Ct/+hCwllp2o4D8Vcs2+Wi44JNkLXatzGOFGpW4L+KKHiD9O2Vg7Wq8Ch9M5BWq0n3+RgrMfLJDpUkdDIE068YO/GgOLrHe1o5veT2/MaKPqDnCrjEWdrnT0kGxJQ4g1J26RJauterKKR7RmPEACJYGXfvakHHs=; X-YMail-OSG: kmTkwGkVM1na5GyjSQGwGk2r.iSqT0as1d9DxBUCeOyc0SvCZ2ZCbIKYldfB04yXp.bXYagnhbN1c25gs9G15TwMSCakjgBbTTe1JQYuLqX4XPeldPaV8m8r4OJuIj9lNXOo2NFERX8fg_fdLXI7pDpJGkGamFk8aOvNl3j.gfuowFMUSz_FWLetAmLHkqH2eq4S7LvBq.rm Received: from [98.169.13.4] by web52106.mail.re2.yahoo.com via HTTP; Mon, 09 Feb 2009 17:29:11 PST X-Mailer: YahooMailWebService/0.7.260.1 Date: Mon, 9 Feb 2009 17:29:11 -0800 (PST) From: gahn To: Mark Andrews In-Reply-To: <200902100012.n1A0CHLr027615@drugs.dv.isc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Message-ID: <147404.54014.qm@web52106.mail.re2.yahoo.com> Cc: freebsd security Subject: Re: ipv6 and ipfw X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ipfreak@yahoo.com List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2009 01:29:12 -0000 Thanks Mark: my machine would load the modules when the system boots up. here is my rc.conf: firewall_enable="YES" firewall_script="/etc/ipfw.conf" firewall_logging="YES" does that matter? --- On Mon, 2/9/09, Mark Andrews wrote: > From: Mark Andrews > Subject: Re: ipv6 and ipfw > To: ipfreak@yahoo.com > Cc: "freebsd security" > Date: Monday, February 9, 2009, 4:12 PM > In message > <416026.72989.qm@web52103.mail.re2.yahoo.com>, gahn > writes: > > Thanks Mark: > > > > Sorry I am using FreeBSD 7.1. > > > > Best > > FreeBSD 6's ipfw has IPv6 support so I presume 7's > does as well. > > Note I build my kernel with the following options as I > want > forwarding. > > options IPFIREWALL > options IPFIREWALL_FORWARD > > Mark > > > --- On Mon, 2/9/09, Mark Andrews > wrote: > > > > > From: Mark Andrews > > > Subject: Re: ipv6 and ipfw > > > To: ipfreak@yahoo.com > > > Cc: "freebsd security" > > > > Date: Monday, February 9, 2009, 3:14 PM > > > In message > > > > <856498.31257.qm@web52106.mail.re2.yahoo.com>, gahn > > > writes: > > > > Hi all: > > > > > > > > I have a station that has multiple > interfaces. Some of > > > interfaces run both ip > > > > v4 and ipv6. checked with man pages of > rc.conf and it > > > seems to be telling me > > > > that ipfw for ipv4 and ipv6 are two > different > > > processes and need two differen > > > > t scripts. > > > > > > > > Is it correct? Or anyone here can direct me > for the > > > web sites with more infor > > > > mation? > > > > > > > > Thanks > > > > > > The answer to that is version specific. IPFW2 > includes > > > support for IPv6 as well as IPv4 though not all > the > > > features > > > are supported for IPv6. > > > > > > Mark > > > -- > > > Mark Andrews, ISC > > > 1 Seymour St., Dundas Valley, NSW 2117, Australia > > > PHONE: +61 2 9871 4742 INTERNET: > > > Mark_Andrews@isc.org > > > _______________________________________________ > > > freebsd-security@freebsd.org mailing list > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > > To unsubscribe, send any mail to > > > > "freebsd-security-unsubscribe@freebsd.org" > > > > > > > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to > "freebsd-security-unsubscribe@freebsd.org" > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: > Mark_Andrews@isc.org