Subject: Re: ipf & ipv6 again
To: None <tech-net@netbsd.org>
From: Tomi Nylund <wizard@mail.suomi.net>
List: tech-net
Date: 11/21/2001 11:59:49
Tomi Nylund wrote:
>
> Hello all,
>
> about a month ago I posted with questions about setting up
> a proxy-arp'ed subnet. Thanks for all the help, especially to
> Julian for the choparp patch. I wasn't able to get arpd to
> work, but choparp worked just fine.
>
> Now, one problem remains, ipfilter & ipv6.
>
> I tried compiling ipfilter 3.4.21 with -DUSE_INET6 to get it filter
> IPv6 packets, but compilation fails with following errors (after running
> ./BSD/kupgrade and then make netbsd, as per FAQ):
>
> When trying to compile the LKM:
>
>
[...]
> Stop.
>
> The function in question seems to be in sys/netinet6/ip6protosw.h,
> why it's not included is beyond me (I'm not a C programmer..)
>
> So, the questions are:
>
> 1) How to compile ipfilter for NetBSD 1.5.2 with ipv6 support
> included (plain ipv4 works just fine). I asked this last time
> also, but got no answers..
>
> 2) Is it possible to execute ipv6 filtering, if the machine is
> a ipv6 router for forwarded packets, or should I just filter
> unwanted ipv6 packets on destination hosts?
>
> 3) Where's that "secret switch" (two commented out lines) on
> 1.5.2 syssrc I saw mentioned on some e-mail, enabling
> ipv6 filtering? ;) But really, if it's there, tell me.. :)
>
> Any help greatly appreciated!
>
> Tomi
And, if someone gives clear enough answers, I'll write a small section
for the IPFilter FAQ regarding this, if it's okay with Darren. For
me this seems to be an awfully popular topic..
Tomi