Re: (Debian 2.6.32-45) problems using ipv6/ip6tables #2

2012-05-26 Thread Pascal Hambourg
g.spellauge a écrit : > thanks, bu what i do not understand is the fact, that v6-traffic (even > the responses to http-requests) is completely blocked after successfully > receiving a few echo-replys? Because after some time the neighbour cache entry expires and needs to be refreshed, but your ru

Re: Re: (Debian 2.6.32-45) problems using ipv6/ip6tables #2

2012-05-24 Thread g.spellauge
thanks, bu what i do not understand is the fact, that v6-traffic (even the responses to http-requests) is completely blocked after successfully receiving a few echo-replys? if i modify ${IPT} -A INPUT -i ${INE_IFACE} -m state --state ESTABLISHED,RELATED -j ACCEPT ${IPT} -A INPUT -i

Re: (Debian 2.6.32-45) problems using ipv6/ip6tables #2

2012-05-21 Thread Pascal Hambourg
Hello, Stephan Seitz a écrit : > > IPv6 doesn't have ARP anymore, it uses ICMPv6 to > discover ARP addresses and neighbours with the help of multicast IPv6 > addresses. So your configuration probably drops these packets. It would > try to allow all icmpv6 traffic: > ${IPT} -A INPUT -j A

Re: (Debian 2.6.32-45) problems using ipv6/ip6tables #2

2012-05-16 Thread Stephan Seitz
On Wed, May 16, 2012 at 01:54:42PM +0200, gus...@spllg.de wrote: i'm new to ipv6, just trying to go the first steps and got trapped. Yes, so it seems. IPv6 doesn’t have ARP anymore, it uses ICMPv6 to discover ARP addresses and neighbours with the help of multicast IPv6 addresses. So your conf

(Debian 2.6.32-45) problems using ipv6/ip6tables #2

2012-05-16 Thread gus...@spllg.de
hi, i'm new to ipv6, just trying to go the first steps and got trapped. my configuration: testmachine with 2 network interfaces (eth0 local, eth1 connected to our internet router) Linux version 2.6.32-5-686 (Debian 2.6.32-45) (da...@debian.org) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Sun M