Displaying 2 results from an estimated 2 matches for "ipv6mask".
Did you mean:
ipv6_mask
2020 Jan 01
2
Passing multiple addresses with masks to nwfilter
...virt domains can't spoof
IPv6 traffic. It looks like this:
<filter name='no-ipv6-spoofing' chain='ipv6-ip' priority='-710'>
<rule action='return' direction='out' priority='500'>
<ipv6 srcipaddr='$IPV6' srcipmask='$IPV6MASK'/>
</rule>
<rule action='drop' direction='out' priority='1000'/>
</filter>
The goal is to allow any traffic coming from the entire prefix (e.g.
2001:db8::/32). This theoretically would work fine when passing in the
variables from the domain defi...
2020 Jan 01
0
Re: Passing multiple addresses with masks to nwfilter
...gt; spoof IPv6 traffic. It looks like this:
>
> <filter name='no-ipv6-spoofing' chain='ipv6-ip' priority='-710'>
> <rule action='return' direction='out' priority='500'>
> <ipv6 srcipaddr='$IPV6' srcipmask='$IPV6MASK'/>
> </rule>
> <rule action='drop' direction='out' priority='1000'/>
> </filter>
>
> The goal is to allow any traffic coming from the entire prefix (e.g.
> 2001:db8::/32). This theoretically would work fine when passing in the
&...