Re: freebsd-ipfw Digest, Vol 270, Issue 1

2008-06-18 Thread Raffaele De Lorenzo

Hi,
I see From [RFC4861] the icmpv6 type 136 is still used for "Neighbor
Advertisement" messagges

136  Neighbor Advertisement   [RFC4861]

You must modify your ipfw IPv6 rules... see this URL for all informations:

http://www.iana.org/assignments/icmpv6-parameters

Anyway the "echo request" message type is 128 and the "echo reply"
message type is 129.



Cheers

Raffaele



Edwin Sanjoto wrote:
Just use ipfw the same like for IPv4, then since FreeBSD 6.x it 
does also support IPv6. If you still have an older version of 
FreeBSD, use ip6fw.




  

bye
Fabian



Hmm I have already used it as IPv4 firewall but it didn't work. are icmptypes 
for ipv6 different from ipv4? i just want to block any echo request to my 
computer from ipv6 network.

This is my Rule:
$cmd 00501 allow ipv6-icmp from $net to me in icmptypes 136 via $int
$cmd 00502 deny ipv6-icmp from any to me in icmptypes 136 via $int


  
___

freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

  







___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: freebsd-ipfw Digest, Vol 270, Issue 1

2008-06-18 Thread Raffaele De Lorenzo

Hi,
I see From [RFC4861] the icmpv6 type 136 is still used for "Neighbor 
Advertisement" messagges


136  Neighbor Advertisement   [RFC4861]

You must modify your ipfw IPv6 rules... see this URL for all informations:

http://www.iana.org/assignments/icmpv6-parameters

Anyway the "echo request" message type is 128 and the "echo reply" message type 
is 129.



Cheers

Raffaele



Edwin Sanjoto wrote:
Just use ipfw the same like for IPv4, then since FreeBSD 6.x it 
does also support IPv6. If you still have an older version of 
FreeBSD, use ip6fw.




  

bye
Fabian



Hmm I have already used it as IPv4 firewall but it didn't work. are icmptypes 
for ipv6 different from ipv4? i just want to block any echo request to my 
computer from ipv6 network.

This is my Rule:
$cmd 00501 allow ipv6-icmp from $net to me in icmptypes 136 via $int
$cmd 00502 deny ipv6-icmp from any to me in icmptypes 136 via $int


  
___

freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

  


___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: About IPFW for IPv6

2008-06-18 Thread Fabian Wenk

Hello Julian

On 15.06.08 22:43, Julian Elischer wrote:

Fabian Wenk wrote:


Just use ipfw the same like for IPv4, then since FreeBSD 6.x it does 
also support IPv6. If you still have an older version of FreeBSD, use 
ip6fw.




there are some features that are not yet suported.. (e.g. tables and 
fwd I believe)


I do not know about tables, but fwd sure is brocken and acting 
strange, see PR 117214 [1].


  [1] http://www.freebsd.org/cgi/query-pr.cgi?pr=117214


bye
Fabian
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"