From owner-freebsd-net@FreeBSD.ORG Sun Dec 11 13:46:25 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D2E5B16A41F for ; Sun, 11 Dec 2005 13:46:25 +0000 (GMT) (envelope-from b.candler@pobox.com) Received: from thorn.pobox.com (thorn.pobox.com [208.210.124.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4EEEA43D53 for ; Sun, 11 Dec 2005 13:46:25 +0000 (GMT) (envelope-from b.candler@pobox.com) Received: from thorn (localhost [127.0.0.1]) by thorn.pobox.com (Postfix) with ESMTP id 7B466FD; Sun, 11 Dec 2005 08:46:46 -0500 (EST) Received: from mappit.local.linnet.org (212-74-113-67.static.dsl.as9105.com [212.74.113.67]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by thorn.sasl.smtp.pobox.com (Postfix) with ESMTP id 3C4BC1205; Sun, 11 Dec 2005 08:46:44 -0500 (EST) Received: from lists by mappit.local.linnet.org with local (Exim 4.60 (FreeBSD)) (envelope-from ) id 1ElRWv-000PX2-CL; Sun, 11 Dec 2005 13:46:21 +0000 Date: Sun, 11 Dec 2005 13:46:21 +0000 From: Brian Candler To: "Eric W. Bates" Message-ID: <20051211134621.GA98105@uk.tiscali.com> References: <439AF794.3080909@vineyard.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <439AF794.3080909@vineyard.net> User-Agent: Mutt/1.4.2.1i Cc: freebsd-net@freebsd.org Subject: Re: FBSD 6.0 ipfw weirdness with ssh x-forwarding X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Dec 2005 13:46:25 -0000 On Sat, Dec 10, 2005 at 10:43:16AM -0500, Eric W. Bates wrote: > Dec 9 23:15:33 gertrude kernel: ipfw: 510 Deny TCP > [::0001]:6010 [::0001]:61310 out via lo0 Note that ::0001 is the IPv6 "localhost" address (equivalent to IPv4 127.0.0.1) > I was hoping someone smarter than I could point me to any documentation > about the change. > > Has ipfw recently split me and me6 (I never noticed the latter before > because I'm not using IPv6 yet [shame])? Looking on a 5.4-STABLE system, the ipfw(8) manpage mentions 'me' but not 'me6'. Looking on the web, at http://www.freebsd.org/cgi/man.cgi?query=ipfw&apropos=0&sektion=8&manpath=FreeBSD+6.0-RELEASE+and+Ports&format=html I see 'me' and 'me6' options. So yes, it looks like it has been split. > Is this a change in the way the 6.0 kernel handles lo0 traffic in general? > > Is this a change in ssh forwarding? Or has there always been IPv6 traffic? IPv6 support has been around in FreeBSD for a long time. If this causes you pain (as it does for me), then I recommend you remove 'options INET6' from your kernel config and rebuild the kernel. Other things to look for are your hosts file, which may have ::1 localhost 127.0.0.1 localhost in which case you can swap them, or comment out the IPv6 ::1 one altogether (otherwise IPv6 is preferred over IPv4 when using localhost). Also, a lot of ports tend to build with IPV6 support unless you explicitly disable it. I think there's a setting you can put in /etc/make.conf but I can't remember offhand what it is. Regards, Brian.