RE: allowing gif thru ipfw

2012-02-01 Thread Kirk Davis
On Wednesday, February 01, 2012 7:24 AM wrote Eugene Grosbein >01.02.2012 21:12, Eric W. Bates пишет: >> On 2/1/2012 3:06 AM, Doug Barton wrote: >>> If it's a hurricane electric tunnel don't you want protocol 41? >> >> Well, it's a straight up gif. Right this second I'm trying to suss out >> wh

Re: allowing gif thru ipfw

2012-02-01 Thread Eric W. Bates
[sigh] I stand enlightened with increased understanding. Thank you very much. That is exactly what I've been seeing on my pfSense machine and could not replicate on my stand-alone FBSD box. On 2/1/2012 10:14 AM, Hajimu UMEMOTO wrote: Hi, On Wed, 01 Feb 2012 09:15:15 -0500 "Eric W. Bates"

Re: allowing gif thru ipfw

2012-02-01 Thread Hajimu UMEMOTO
Hi, > On Wed, 01 Feb 2012 09:15:15 -0500 > "Eric W. Bates" said: ericx> On 2/1/2012 3:32 AM, Hajimu UMEMOTO wrote: > Hi, > ericx> Am I even correct in assuming that my gif packets are being blocked? > > Are you trying to pass an IPv6 over IPv4 tunnel? If so, > > $fwcmd add 00140

Re: allowing gif thru ipfw

2012-02-01 Thread Eugene Grosbein
01.02.2012 21:12, Eric W. Bates пишет: > On 2/1/2012 3:06 AM, Doug Barton wrote: >> If it's a hurricane electric tunnel don't you want protocol 41? > > Well, it's a straight up gif. Right this second I'm trying to suss out > which protocol gif's use. If it's documented, I can't find it. The > cl

Re: allowing gif thru ipfw

2012-02-01 Thread Eric W. Bates
On 2/1/2012 3:32 AM, Hajimu UMEMOTO wrote: Hi, ericx> Am I even correct in assuming that my gif packets are being blocked? Are you trying to pass an IPv6 over IPv4 tunnel? If so, $fwcmd add 00140 allow ip4 from $he_tun to me proto ipv6 $fwcmd add 00141 allow ip4 from me to

Re: allowing gif thru ipfw

2012-02-01 Thread Eric W. Bates
On 2/1/2012 3:06 AM, Doug Barton wrote: If it's a hurricane electric tunnel don't you want protocol 41? Well, it's a straight up gif. Right this second I'm trying to suss out which protocol gif's use. If it's documented, I can't find it. The closest bit I can find on the man page is: The be

Re: allowing gif thru ipfw

2012-02-01 Thread Hajimu UMEMOTO
Hi, > On Tue, 31 Jan 2012 23:36:56 -0500 > "Eric W. Bates" said: ericx> Seems like a silly question; but how does one allow the packets ericx> composing a gif tunnel thru ipfw? ericx> I assumed a gif was made up of ipencap (IP proto 4) packets and added rules: ericx> $fwcmd add 00140

Re: allowing gif thru ipfw

2012-02-01 Thread Doug Barton
If it's a hurricane electric tunnel don't you want protocol 41? On 01/31/2012 22:55, Eugene Grosbein wrote: > 01.02.2012 11:36, Eric W. Bates пишет: >> Seems like a silly question; but how does one allow the packets >> composing a gif tunnel thru ipfw? >> >> I assumed a gif was made up of ipencap

Re: allowing gif thru ipfw

2012-01-31 Thread Eugene Grosbein
01.02.2012 11:36, Eric W. Bates пишет: > Seems like a silly question; but how does one allow the packets > composing a gif tunnel thru ipfw? > > I assumed a gif was made up of ipencap (IP proto 4) packets and added rules: > > $fwcmd add 00140 allow ipencap from $he_tun to me > $fwcmd add 00141 a