Date: Tue, 10 Feb 2009 12:34:43 +1100 From: Mark Andrews <Mark_Andrews@isc.org> To: ipfreak@yahoo.com Cc: freebsd security <freebsd-security@freebsd.org> Subject: Re: ipv6 and ipfw Message-ID: <200902100134.n1A1Yh02029334@drugs.dv.isc.org> In-Reply-To: Your message of "Mon, 09 Feb 2009 17:29:11 -0800." <147404.54014.qm@web52106.mail.re2.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <147404.54014.qm@web52106.mail.re2.yahoo.com>, gahn writes: > > Thanks Mark: > > my machine would load the modules when the system boots up. here is my rc.con > f: > > firewall_enable="YES" > firewall_script="/etc/ipfw.conf" > firewall_logging="YES" > > does that matter? It depends on if you need the additional functionality. > --- On Mon, 2/9/09, Mark Andrews <Mark_Andrews@isc.org> wrote: > > > From: Mark Andrews <Mark_Andrews@isc.org> > > Subject: Re: ipv6 and ipfw > > To: ipfreak@yahoo.com > > Cc: "freebsd security" <freebsd-security@freebsd.org> > > Date: Monday, February 9, 2009, 4:12 PM > > In message > > <416026.72989.qm@web52103.mail.re2.yahoo.com>, gahn > > writes: > > > Thanks Mark: > > > > > > Sorry I am using FreeBSD 7.1. > > > > > > Best > > > > FreeBSD 6's ipfw has IPv6 support so I presume 7's > > does as well. > > > > Note I build my kernel with the following options as I > > want > > forwarding. > > > > options IPFIREWALL > > options IPFIREWALL_FORWARD > > > > Mark > > > > > --- On Mon, 2/9/09, Mark Andrews > > <Mark_Andrews@isc.org> wrote: > > > > > > > From: Mark Andrews <Mark_Andrews@isc.org> > > > > Subject: Re: ipv6 and ipfw > > > > To: ipfreak@yahoo.com > > > > Cc: "freebsd security" > > <freebsd-security@freebsd.org> > > > > Date: Monday, February 9, 2009, 3:14 PM > > > > In message > > > > > > <856498.31257.qm@web52106.mail.re2.yahoo.com>, gahn > > > > writes: > > > > > Hi all: > > > > > > > > > > I have a station that has multiple > > interfaces. Some of > > > > interfaces run both ip > > > > > v4 and ipv6. checked with man pages of > > rc.conf and it > > > > seems to be telling me > > > > > that ipfw for ipv4 and ipv6 are two > > different > > > > processes and need two differen > > > > > t scripts. > > > > > > > > > Is it correct? Or anyone here can direct me > > for the > > > > web sites with more infor > > > > > mation? > > > > > > > > > > Thanks > > > > > > > > The answer to that is version specific. IPFW2 > > includes > > > > support for IPv6 as well as IPv4 though not all > > the > > > > features > > > > are supported for IPv6. > > > > > > > > Mark > > > > -- > > > > Mark Andrews, ISC > > > > 1 Seymour St., Dundas Valley, NSW 2117, Australia > > > > PHONE: +61 2 9871 4742 INTERNET: > > > > Mark_Andrews@isc.org > > > > _______________________________________________ > > > > freebsd-security@freebsd.org mailing list > > > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > > > To unsubscribe, send any mail to > > > > > > "freebsd-security-unsubscribe@freebsd.org" > > > > > > > > > > > > _______________________________________________ > > > freebsd-security@freebsd.org mailing list > > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > > To unsubscribe, send any mail to > > "freebsd-security-unsubscribe@freebsd.org" > > -- > > Mark Andrews, ISC > > 1 Seymour St., Dundas Valley, NSW 2117, Australia > > PHONE: +61 2 9871 4742 INTERNET: > > Mark_Andrews@isc.org > > > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200902100134.n1A1Yh02029334>