Displaying 3 results from an estimated 3 matches for "d2ff".
Did you mean:
d2f
2020 Jan 01
2
Passing multiple addresses with masks to nwfilter
...e goal is to allow any traffic coming from the entire prefix (e.g.
2001:db8::/32). This theoretically would work fine when passing in the
variables from the domain definition like so:
<filterref filter='no-ipv6-spoofing'>
<parameter name='IPV6' value='2001:db8:1:6:dc:d2ff:fef2:2181'/>
<parameter name='IPV6_MASK' value='32'/>
</filterref>
But the problem comes when wanting to allow multiple prefixes (and thus
multiple $IPV6 and $IPV6_MASK variables). If there is more than one
definition of $IPV6, how could I associate it with a c...
2005 Jun 02
3
Net > DMZ > AllowFTP
...ope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:a0:d2:1c:aa:13 brd ff:ff:ff:ff:ff:ff
inet 209.5.171.66/26 brd 209.5.171.127 scope global eth0
inet6 fe80::2a0:d2ff:fe1c:aa13/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:a0:d2:1c:a9:7f brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global eth1
inet6 fe80::2a0:d2ff:fe1c:a97f/64...
2020 Jan 01
0
Re: Passing multiple addresses with masks to nwfilter
...raffic coming from the entire prefix (e.g.
> 2001:db8::/32). This theoretically would work fine when passing in the
> variables from the domain definition like so:
>
> <filterref filter='no-ipv6-spoofing'>
> <parameter name='IPV6' value='2001:db8:1:6:dc:d2ff:fef2:2181'/>
> <parameter name='IPV6_MASK' value='32'/>
> </filterref>
>
> But the problem comes when wanting to allow multiple prefixes (and thus
> multiple $IPV6 and $IPV6_MASK variables). If there is more than one
> definition of $IPV6, how...