netfilter buglog - May 2014 - [Bug 926] New: icmp: ICMPv6 types are not supported

https://bugzilla.netfilter.org/show_bug.cgi?id=926

           Summary: icmp: ICMPv6 types are not supported
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey at gmail.com
   Estimated Hours: 0.0


The following icmpv6 types are not supported in nft

Valid ICMPv6 Types        => Valid ICMP Type in nftables.
destination-unreachable:     => ok in nft
   no-route 
   communication-prohibited
   address-unreachable
   port-unreachable
packet-too-big             => ok in nft  in nft
time-exceeded (ttl-exceeded)
   ttl-zero-during-transit
   ttl-zero-during-reassembly
parameter-problem        => ok in nft
   bad-header
   unknown-header-type
   unknown-option
echo-request (ping)    => ok in nft
echo-reply (pong)    => ok in nft
router-solicitation    => nd-router-solicit in nft
router-advertisement    => nd-router-advert in nft
neighbour-solicitation (neighbor-solicitation)
neighbour-advertisement (nd-neighbor-advert)
redirect        => nd-redirect  in nft


The last commit in Pablo git tree of kernel is "40e6442 netfilter:
x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use
mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional
output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=926

Beno�t Knecht <benoit.knecht at fsfe.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |benoit.knecht at fsfe.org

--- Comment #1 from Beno�t Knecht <benoit.knecht at fsfe.org> ---
As far as I can tell, Inverse Neighbor Discovery Solicitation and Inverse
Neighbor Discovery Advertisement (https://tools.ietf.org/html/rfc3122) are not
supported either.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160822/a6813d6a/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=926

--- Comment #2 from Beno�t Knecht <benoit.knecht at fsfe.org> ---
(In reply to Beno�t Knecht from comment #1)
> As far as I can tell, Inverse Neighbor Discovery Solicitation and Inverse
> Neighbor Discovery Advertisement (https://tools.ietf.org/html/rfc3122) are
> not supported either.
The types for those are 141 and 142 respectively, BTW.

And Multicast Multicast Listener Report v2 (type 143) seems to be missing as
well (https://www.ietf.org/rfc/rfc3810.txt).

As for Multicast Listener Done (type 132,
https://www.ietf.org/rfc/rfc2710.txt), it is called mld-listener-reduction in
nftables, which is a bit unexpected. Perhaps there could be an alias called
mld-listener-done.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160822/318c3b82/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=926

--- Comment #3 from Beno�t Knecht <benoit.knecht at fsfe.org> ---
The three missing ICMPv6 types I mentioned above (Inverse Neighbor Discovery
Solicitation, Inverse Neighbor Discovery Advertisement and Multicast Listener
Report v2) as well as the mld-listener-done alias for mld-listener-reduction
have been implemented in 9ade8fb (thanks Phil!).

So as far as I'm concerned this issue can be closed, but I'm not sure if
all
the ICMPv6 types in the original report have been implemented.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180109/f1f7da5c/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=926

Dennis Schridde <devurandom at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |devurandom at gmx.net

--- Comment #4 from Dennis Schridde <devurandom at gmx.net> ---
(In reply to Beno�t Knecht from comment #3)
> So as far as I'm concerned this issue can be closed, but I'm not
sure if all
> the ICMPv6 types in the original report have been implemented.
Not all of them have been implemented:
iptables-translate-restore v1.6.2: unknown reject type
"icmp6-no-route"

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180602/9ffa2c43/attachment.html>