ipv6 and ipfw

[gahn]

Thanks Mark:

my machine would load the modules when the system boots up. here is my rc.conf:

firewall_enable="YES"
firewall_script="/etc/ipfw.conf"
firewall_logging="YES"

does that matter?



--- On Mon, 2/9/09, Mark Andrews <Mark_Andrews at isc.org> wrote:

> From: Mark Andrews <Mark_Andrews at isc.org>
> Subject: Re: ipv6 and ipfw
> To: ipfreak at yahoo.com
> Cc: "freebsd security" <freebsd-security at freebsd.org>
> Date: Monday, February 9, 2009, 4:12 PM
> In message
> <416026.72989.qm at web52103.mail.re2.yahoo.com>, gahn
> writes:
> > Thanks Mark:
> > 
> > Sorry I am using FreeBSD 7.1.
> > 
> > Best
> 
> 	FreeBSD 6's ipfw has IPv6 support so I presume 7's
> does as well.
> 
> 	Note I build my kernel with the following options as I
> want
> 	forwarding.
> 
> 	options         IPFIREWALL
> 	options         IPFIREWALL_FORWARD
> 
> 	Mark
>  
> > --- On Mon, 2/9/09, Mark Andrews
> <Mark_Andrews at isc.org> wrote:
> > 
> > > From: Mark Andrews <Mark_Andrews at isc.org>
> > > Subject: Re: ipv6 and ipfw
> > > To: ipfreak at yahoo.com
> > > Cc: "freebsd security"
> <freebsd-security at freebsd.org>
> > > Date: Monday, February 9, 2009, 3:14 PM
> > > In message
> > >
> <856498.31257.qm at web52106.mail.re2.yahoo.com>, gahn
> > > writes:
> > > > Hi all:
> > > > 
> > > > I have a station that has multiple
> interfaces. Some of
> > > interfaces run both ip
> > > > v4 and ipv6. checked with man pages of
> rc.conf and it
> > > seems to be telling me 
> > > > that ipfw for ipv4 and ipv6 are two
> different
> > > processes and need two differen
> > > > t scripts.
> > > > 
> > > > Is it correct? Or anyone here can direct me
> for the
> > > web sites with more infor
> > > > mation?
> > > > 
> > > > Thanks
> > > 
> > > 	The answer to that is version specific.  IPFW2
> includes
> > > 	support for IPv6 as well as IPv4 though not all
> the
> > > features
> > > 	are supported for IPv6.
> > > 
> > > 	Mark
> > > -- 
> > > Mark Andrews, ISC
> > > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > > PHONE: +61 2 9871 4742                 INTERNET:
> > > Mark_Andrews at isc.org
> > > _______________________________________________
> > > freebsd-security at freebsd.org mailing list
> > >
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > > To unsubscribe, send any mail to
> > >
> "freebsd-security-unsubscribe at freebsd.org"
> > 
> > 
> >       
> > _______________________________________________
> > freebsd-security at freebsd.org mailing list
> >
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > To unsubscribe, send any mail to
> "freebsd-security-unsubscribe at freebsd.org"
> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET:
> Mark_Andrews at isc.org