In message <147404.54014...@web52106.mail.re2.yahoo.com>, gahn writes:
>
> Thanks Mark:
>
> my machine would load the modules when the system boots up. here is my rc.con
> f:
>
> firewall_enable="YES"
> firewall_script="/etc/ipfw.conf"
> firewall_logging="YES"
>
> does that matter?
It depends on if you need the additional functionality.
> --- On Mon, 2/9/09, Mark Andrews <mark_andr...@isc.org> wrote:
>
> > From: Mark Andrews <mark_andr...@isc.org>
> > Subject: Re: ipv6 and ipfw
> > To: ipfr...@yahoo.com
> > Cc: "freebsd security" <freebsd-security@freebsd.org>
> > Date: Monday, February 9, 2009, 4:12 PM
> > In message
> > <416026.72989...@web52103.mail.re2.yahoo.com>, gahn
> > writes:
> > > Thanks Mark:
> > >
> > > Sorry I am using FreeBSD 7.1.
> > >
> > > Best
> >
> > FreeBSD 6's ipfw has IPv6 support so I presume 7's
> > does as well.
> >
> > Note I build my kernel with the following options as I
> > want
> > forwarding.
> >
> > options IPFIREWALL
> > options IPFIREWALL_FORWARD
> >
> > Mark
> >
> > > --- On Mon, 2/9/09, Mark Andrews
> > <mark_andr...@isc.org> wrote:
> > >
> > > > From: Mark Andrews <mark_andr...@isc.org>
> > > > Subject: Re: ipv6 and ipfw
> > > > To: ipfr...@yahoo.com
> > > > Cc: "freebsd security"
> > <freebsd-security@freebsd.org>
> > > > Date: Monday, February 9, 2009, 3:14 PM
> > > > In message
> > > >
> > <856498.31257...@web52106.mail.re2.yahoo.com>, gahn
> > > > writes:
> > > > > Hi all:
> > > > >
> > > > > I have a station that has multiple
> > interfaces. Some of
> > > > interfaces run both ip
> > > > > v4 and ipv6. checked with man pages of
> > rc.conf and it
> > > > seems to be telling me
> > > > > that ipfw for ipv4 and ipv6 are two
> > different
> > > > processes and need two differen
> > > > > t scripts.
> > > > >
> > > > Is it correct? Or anyone here can direct me
> > for the
> > > > web sites with more infor
> > > > > mation?
> > > > >
> > > > > Thanks
> > > >
> > > > The answer to that is version specific. IPFW2
> > includes
> > > > support for IPv6 as well as IPv4 though not all
> > the
> > > > features
> > > > are supported for IPv6.
> > > >
> > > > Mark
> > > > --
> > > > Mark Andrews, ISC
> > > > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > > > PHONE: +61 2 9871 4742 INTERNET:
> > > > mark_andr...@isc.org
> > > > _______________________________________________
> > > > freebsd-security@freebsd.org mailing list
> > > >
> > http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > > > To unsubscribe, send any mail to
> > > >
> > "freebsd-security-unsubscr...@freebsd.org"
> > >
> > >
> > >
> > > _______________________________________________
> > > freebsd-security@freebsd.org mailing list
> > >
> > http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > > To unsubscribe, send any mail to
> > "freebsd-security-unsubscr...@freebsd.org"
> > --
> > Mark Andrews, ISC
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742 INTERNET:
> > mark_andr...@isc.org
>
>
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: mark_andr...@isc.org
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"
