tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: ipfilter ipv6 icmp woes



On Wednesday 26 August 2009 23:09:36 Manuel Bouyer wrote:
> as you have a quick in @2, @3 won't ever match.

...

> I would remove the "keep state" for ipv6-icmp and ff02::/16 and add
> appropriate rules in the 601 group. "keep state" is asking for troubles
> with icmp, because there's not much to identify them.

That seemed to do the trick - thanks!

Roy


Home | Main Index | Thread Index | Old Index