Subject: Re: ipf & ipv6 again
To: None <tech-net@netbsd.org>
From: Tomi Nylund <wizard@mail.suomi.net>
List: tech-net
Date: 11/21/2001 11:59:49
Tomi Nylund wrote:
> 
> Hello all,
> 
> about a month ago I posted with questions about setting up
> a proxy-arp'ed subnet. Thanks for all the help, especially to
> Julian for the choparp patch. I wasn't able to get arpd to
> work, but choparp worked just fine.
> 
> Now, one problem remains, ipfilter & ipv6.
> 
> I tried compiling ipfilter 3.4.21 with -DUSE_INET6 to get it filter
> IPv6 packets, but compilation fails with following errors (after running
> ./BSD/kupgrade and then make netbsd, as per FAQ):
> 
> When trying to compile the LKM:
> 
>

[...]

> Stop.
> 
> The function in question seems to be in sys/netinet6/ip6protosw.h,
> why it's not included is beyond me (I'm not a C programmer..)
> 
> So, the questions are:
> 
> 1) How to compile ipfilter for NetBSD 1.5.2 with ipv6 support
>    included (plain ipv4 works just fine). I asked this last time
>    also, but got no answers..
> 
> 2) Is it possible to execute ipv6 filtering, if the machine is
>    a ipv6 router for forwarded packets, or should I just filter
>    unwanted ipv6 packets on destination hosts?
> 
> 3) Where's that "secret switch" (two commented out lines) on
>    1.5.2 syssrc I saw mentioned on some e-mail, enabling
>    ipv6 filtering? ;) But really, if it's there, tell me.. :)
> 
> Any help greatly appreciated!
> 
> Tomi

And, if someone gives clear enough answers, I'll write a small section
for the IPFilter FAQ regarding this, if it's okay with Darren. For
me this seems to be an awfully popular topic..


Tomi