From owner-freebsd-net@FreeBSD.ORG  Tue Dec 21 05:55:27 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1557216A4CE
	for <freebsd-net@freebsd.org>; Tue, 21 Dec 2004 05:55:27 +0000 (GMT)
Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A470E43D31
	for <freebsd-net@freebsd.org>; Tue, 21 Dec 2004 05:55:26 +0000 (GMT)
	(envelope-from brdavis@odin.ac.hmc.edu)
Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1])
	by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id iBL5tTTM028426;
	Mon, 20 Dec 2004 21:55:29 -0800
Received: (from brdavis@localhost)
	by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id iBL5tTqG028425;
	Mon, 20 Dec 2004 21:55:29 -0800
Date: Mon, 20 Dec 2004 21:55:29 -0800
From: Brooks Davis <brooks@one-eyed-alien.net>
To: Charlie Schluting <charlie@schluting.com>
Message-ID: <20041221055528.GA27519@odin.ac.hmc.edu>
References: <41C784DC.5020805@schluting.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="k1lZvvs/B4yU6o8G"
Content-Disposition: inline
In-Reply-To: <41C784DC.5020805@schluting.com>
User-Agent: Mutt/1.4.1i
X-Virus-Scanned: by amavisd-new
X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu
cc: freebsd-net@freebsd.org
Subject: Re: firewalling with tunnels, and/or ipv6
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Dec 2004 05:55:27 -0000


--k1lZvvs/B4yU6o8G
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Dec 20, 2004 at 06:05:16PM -0800, Charlie Schluting wrote:
> Ok, I've got a v6 tunnel, and to make it work I had to "allow ipv6 from=
=20
> <endpoint>" in ipfw. From what I understand, I have to make a completely=
=20
> different set of rules for ipv6, and load them using the -6 flag.
>=20
> Correct so far?

ip6fw is an entierly different beast from ipfw.  There is no -6 option
to ipfw.  Use ip6fw instead.  If 6.x we should have ipv6 support in ipfw
and ip6fw should be gone.

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--k1lZvvs/B4yU6o8G
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFBx7rQXY6L6fI4GtQRAkBNAJ9R16Bhddf/JIvsRnxbUZAZEOOoeACgtP/N
d8KFGuf9ZPJIhLElywdb/tk=
=z2Fz
-----END PGP SIGNATURE-----

--k1lZvvs/B4yU6o8G--