by mail.netbsd.org with SMTP; 10 May 2000 00:57:00 -0000
	by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id JAA24398;
	Wed, 10 May 2000 09:56:28 +0900 (JST)
To: Mason Loring Bliss <mason@acheron.middleboro.ma.us>
cc: tech-security@netbsd.org
In-reply-to: mason's message of Tue, 09 May 2000 17:49:50 -0400.
      <20000509174950.F357@acheron.middleboro.ma.us>
Subject: Re: IPv6 and ipf question...
From: itojun@iijlab.net
Date: Wed, 10 May 2000 09:56:28 +0900
Message-ID: <24396.957920188@coconut.itojun.org>


>Hi, all.
>
>Finding myself home and sick for the second day in a row, I decided to
>muck about with IPv6 a bit. Freenet6 makes it trivially easy to get
>a connection.
>
>Now that I have this working, I wonder if there's any documentation for
>using ipf with IPv6...? My initial prodding hasn't found anything as yet.
>I'm happy leaving gif0 up and running if I can filter it.

	do you want to filter in IPv6 layer, or filter encapsulated packets?
	if the former, I'm not sure, not sure even if there's any...
	ask darren...
	if the latter, you may want to reject packets from unknown parties
	(i.e. non-freenet6) that has IP protocol # 41 (NOT tcp/udp port #).

itojun