search for: icmpv6

http://bugzilla.netfilter.org/show_bug.cgi?id=761 Summary: Bug in ICMPv6 type and code fields processing Product: ipset Version: unspecified Platform: i386 OS/Version: Gentoo Status: NEW Severity: major Priority: P5 Component: default AssignedTo: netfilter-buglog at lists.netfilter....

...transmitted, 0 received, +6 errors, 100% packet loss, time 7892ms tshark for that ping: <centos666.peak.org> [38] # tshark -n -i eth0 ip6 Running as user "root" and group "root". This could be dangerous. Capturing on eth0 0.000000 2607:f678::16:66 -> ff02::1:ff00:1 ICMPv6 Neighbor solicitation 1.000019 2607:f678::16:66 -> ff02::1:ff00:1 ICMPv6 Neighbor solicitation 2.000043 2607:f678::16:66 -> ff02::1:ff00:1 ICMPv6 Neighbor solicitation 4.001030 2607:f678::16:66 -> ff02::1:ff00:1 ICMPv6 Neighbor solicitation 5.001076 2607:f678::16:66 -> ff02::1:f...

https://bugzilla.netfilter.org/show_bug.cgi?id=1276 Bug ID: 1276 Summary: "icmpv6 code" test returns wrong data type. Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org...

http://bugzilla.netfilter.org/show_bug.cgi?id=766 Summary: Segmentation Fault using Hop Limit and ICMPV6-TYPE in same rule Product: iptables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: ip6tables AssignedTo: netfilter-bug...

...r looking in to this. I haven't tried it before now. I cant get it to work. after running the commands you suggest I get this when I run ip6tables --list-rules root at JOTVPN:~# ip6tables --list-rules -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A FORWARD -i vpn -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j DROP -A FORWARD -o vpn -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP Do you have any other ideas? Thanks for your help! Best Regards, Håvard Rabbe On Aug 30, 2016, at 04:39 PM, Guus Sliepen <guus at tinc-vpn.org> wrote: On Sat, Aug 27, 2016 at 11:41:12PM +0000, Håvard Ra...

http://bugzilla.netfilter.org/show_bug.cgi?id=567 Summary: Local multicast ICMPv6 and --state INVALID Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: Ubuntu Status: NEW Severity: blocker Priority: P1 Component: unknown AssignedTo: laforge at netfilter.org R...

https://bugzilla.netfilter.org/show_bug.cgi?id=1138 Bug ID: 1138 Summary: icmpv6 mld-listener-query not detcted Product: nftables Version: unspecified Hardware: x86_64 OS: SuSE Linux Status: NEW Severity: normal Priority: P5 Component: kernel Assignee: pablo at netfilter.org...

https://bugzilla.netfilter.org/show_bug.cgi?id=1468 Bug ID: 1468 Summary: [netdev] dropping ether type vlan frames drops ICMPv6 type 134 Product: nftables Version: unspecified Hardware: other OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org...

Hi Im using tinc to bridge networks together. And im using ebtables to block dhcp traffic for ipv4 on each node in tinc. One of my nodes have recently began using ipv6. The isp is using auto configuration to give out ipv6 addresses. The problem is that every computer in my bridged network is getting ipv6 addresses from that node. The other computers behind the other nodes have no use for ipv6

https://bugzilla.netfilter.org/show_bug.cgi?id=1343 Bug ID: 1343 Summary: With iPv6 masquerade, ICMPv6 time-exceeded pkts are forwarded with bad checksum Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component:...

Hallo, as described by CISCO in http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_7-2/ipv6_autoconfig.html a router hast to send ICMPv6 messages of type RS to the all-router multicast group: ff02::1 and ff02::2 for stateless autoconfiguration. How can I activate this sending in CentOS? Best regards Helmut -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/cent...

https://bugzilla.netfilter.org/show_bug.cgi?id=1250 Bug ID: 1250 Summary: extensions: libip6t_icmp6: unsupported ICMPv6 types Product: iptables Version: 1.6.x Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: ip6tables Assignee: netfilter-buglog at lists.netfilter.org Reporter...

...rd an now it works. But why is not both rules applied on outgoing traffic?  Thank you so much for your help to get this working :-) Best Regards, Håvard Rabbe root at JOTVPN:~# ip6tables --list-rules -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A FORWARD -o bridge -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j DROP -A FORWARD -i bridge -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP On Feb 23, 2017, at 10:48 AM, Guus Sliepen <guus at tinc-vpn.org> wrote: On Wed, Feb 22, 2017 at 08:51:49PM +0000, Håvard Rabbe wrote: thank you for looking in to this. I haven't tried it before now....

https://bugzilla.netfilter.org/show_bug.cgi?id=926 Summary: icmp: ICMPv6 types are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org R...

...W Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: frederik.schwan at linux.com netfilter v0.6 what does not work: table inet filter { chain input { icmp type echo-request limit rate 10/second accept icmpv6 type echo-request limit rate 10/second accept } } gives a "Error: conflicting protocols specified: inet-service vs. icmp" fix: table inet filter { chain input { meta nfproto ipv4 icmp type echo-request limit rate 10/second accept meta nfproto ipv6 icmpv6 type echo-request li...

https://bugzilla.netfilter.org/show_bug.cgi?id=1701 Bug ID: 1701 Summary: wiki Quick_reference-nftables_in_10_minutes#Icmpv6 missing mld2-listener-report (143) Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: nft Assignee: pablo at netfilter...

https://bugzilla.netfilter.org/show_bug.cgi?id=911 Summary: The ICMPv6 type is param-problem or parameter-problem ? Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft Ass...

https://bugzilla.netfilter.org/show_bug.cgi?id=949 Summary: icmpv6 id option doesn't work Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org...

https://bugzilla.netfilter.org/show_bug.cgi?id=1412 Bug ID: 1412 Summary: ip6tables-nft not accepting "icmp" as shorthand for "icmpv6" Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: minor Priority: P5 Component: iptables over nftable Assignee: pablo at netfilter.org...

...Multicast Address - 239.1.1.1 - )"c0:00:02:02"$( : Source Address - 192.0.2.2 - ) - - echo $igmpv3 -} - ctrl_igmpv3_is_in_test() { RET=0 @@ -1077,35 +1057,6 @@ ctrl_igmpv3_is_in_test() log_test "IGMPv3 MODE_IS_INCLUE tests" } -mldv2_is_in_get() -{ - local hbh - local icmpv6 - - hbh=$(: - )"3a:"$( : Next Header - ICMPv6 - )"00:"$( : Hdr Ext Len - )"00:00:00:00:00:00:"$( : Options and Padding - ) - - icmpv6=$(: - )"8f:"$( : Type - MLDv2 Report - )"00:"$( : Code - )"45:39:"$( : Checksum - )&qu...