lkml.org 
[lkml]   [2004]   [Aug]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Trivial IPv6-for-Fedora HOWTO
Date
In article <4129236E.9020205@pobox.com> you wrote:
> If you have an iptables ipv4 firewall, you'll want to
>
> F1) allow ipv6 tunnelled packets to pass through to ip6tables, by
> allowing protocol 41
>
> iptables -A block -p 41 -j ACCEPT
> ("block" is a custom chain on my firewall)
>
> F2) duplicate your ipv4 firewall rules for ipv6, using ip6tables. Some
> things, like masquerade, are not applicable to ipv6.

Note that you have to terminate the tunnel on your firewall in order to
filter the encapsulated ipv6. This is important, since letting tunnel
packets pass your firewall is a major security problem, otherwise.

Greetings
Bernd
--
eckes privat - http://www.eckes.org/
Project Freefire - http://www.freefire.org/
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.225 / U:0.420 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site