Subject: Re: ipf & ipv6 again
To: None <email@example.com>
From: Tomi Nylund <firstname.lastname@example.org>
Date: 11/21/2001 11:59:49
Tomi Nylund wrote:
> Hello all,
> about a month ago I posted with questions about setting up
> a proxy-arp'ed subnet. Thanks for all the help, especially to
> Julian for the choparp patch. I wasn't able to get arpd to
> work, but choparp worked just fine.
> Now, one problem remains, ipfilter & ipv6.
> I tried compiling ipfilter 3.4.21 with -DUSE_INET6 to get it filter
> IPv6 packets, but compilation fails with following errors (after running
> ./BSD/kupgrade and then make netbsd, as per FAQ):
> When trying to compile the LKM:
> The function in question seems to be in sys/netinet6/ip6protosw.h,
> why it's not included is beyond me (I'm not a C programmer..)
> So, the questions are:
> 1) How to compile ipfilter for NetBSD 1.5.2 with ipv6 support
> included (plain ipv4 works just fine). I asked this last time
> also, but got no answers..
> 2) Is it possible to execute ipv6 filtering, if the machine is
> a ipv6 router for forwarded packets, or should I just filter
> unwanted ipv6 packets on destination hosts?
> 3) Where's that "secret switch" (two commented out lines) on
> 1.5.2 syssrc I saw mentioned on some e-mail, enabling
> ipv6 filtering? ;) But really, if it's there, tell me.. :)
> Any help greatly appreciated!
And, if someone gives clear enough answers, I'll write a small section
for the IPFilter FAQ regarding this, if it's okay with Darren. For
me this seems to be an awfully popular topic..