bugzilla-daemon at netfilter.org
2014-May-07 07:28 UTC
[Bug 926] New: icmp: ICMPv6 types are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=926 Summary: icmp: ICMPv6 types are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at gmail.com Estimated Hours: 0.0 The following icmpv6 types are not supported in nft Valid ICMPv6 Types => Valid ICMP Type in nftables. destination-unreachable: => ok in nft no-route communication-prohibited address-unreachable port-unreachable packet-too-big => ok in nft in nft time-exceeded (ttl-exceeded) ttl-zero-during-transit ttl-zero-during-reassembly parameter-problem => ok in nft bad-header unknown-header-type unknown-option echo-request (ping) => ok in nft echo-reply (pong) => ok in nft router-solicitation => nd-router-solicit in nft router-advertisement => nd-router-advert in nft neighbour-solicitation (neighbor-solicitation) neighbour-advertisement (nd-neighbor-advert) redirect => nd-redirect in nft The last commit in Pablo git tree of kernel is "40e6442 netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks" The last commit in libmnl repo is "090a842 examples: use mnl_socket_setsockopt" The last commit in libnftnl repo is "57107c2 common: fix unconditional output of event wrapping stuff" The last commit in nftables repo is "aefa9bf expression: Fix inconsistent output in set" -- Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
bugzilla-daemon at netfilter.org
2016-Aug-22 10:09 UTC
[Bug 926] icmp: ICMPv6 types are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=926 Beno�t Knecht <benoit.knecht at fsfe.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |benoit.knecht at fsfe.org --- Comment #1 from Beno�t Knecht <benoit.knecht at fsfe.org> --- As far as I can tell, Inverse Neighbor Discovery Solicitation and Inverse Neighbor Discovery Advertisement (https://tools.ietf.org/html/rfc3122) are not supported either. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160822/a6813d6a/attachment.html>
bugzilla-daemon at netfilter.org
2016-Aug-22 11:47 UTC
[Bug 926] icmp: ICMPv6 types are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=926 --- Comment #2 from Beno�t Knecht <benoit.knecht at fsfe.org> --- (In reply to Beno�t Knecht from comment #1)> As far as I can tell, Inverse Neighbor Discovery Solicitation and Inverse > Neighbor Discovery Advertisement (https://tools.ietf.org/html/rfc3122) are > not supported either.The types for those are 141 and 142 respectively, BTW. And Multicast Multicast Listener Report v2 (type 143) seems to be missing as well (https://www.ietf.org/rfc/rfc3810.txt). As for Multicast Listener Done (type 132, https://www.ietf.org/rfc/rfc2710.txt), it is called mld-listener-reduction in nftables, which is a bit unexpected. Perhaps there could be an alias called mld-listener-done. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160822/318c3b82/attachment.html>
bugzilla-daemon at netfilter.org
2018-Jan-09 10:55 UTC
[Bug 926] icmp: ICMPv6 types are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=926 --- Comment #3 from Beno�t Knecht <benoit.knecht at fsfe.org> --- The three missing ICMPv6 types I mentioned above (Inverse Neighbor Discovery Solicitation, Inverse Neighbor Discovery Advertisement and Multicast Listener Report v2) as well as the mld-listener-done alias for mld-listener-reduction have been implemented in 9ade8fb (thanks Phil!). So as far as I'm concerned this issue can be closed, but I'm not sure if all the ICMPv6 types in the original report have been implemented. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180109/f1f7da5c/attachment.html>
bugzilla-daemon at netfilter.org
2018-Jun-02 08:48 UTC
[Bug 926] icmp: ICMPv6 types are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=926 Dennis Schridde <devurandom at gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |devurandom at gmx.net --- Comment #4 from Dennis Schridde <devurandom at gmx.net> --- (In reply to Beno�t Knecht from comment #3)> So as far as I'm concerned this issue can be closed, but I'm not sure if all > the ICMPv6 types in the original report have been implemented.Not all of them have been implemented: iptables-translate-restore v1.6.2: unknown reject type "icmp6-no-route" -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180602/9ffa2c43/attachment.html>