So I was just about to put my Ping/ACCEPT loc fw rule into my shorewall6 configuration and thought about the fact that ipv6-icmp != ipv4-icmp. I went looking and noticed that macro.Ping is in shorewall-common, but really, it''s only valid for IPv4 rules. So what''s the plan here? Putting IPv6 specific versions of macros into the shorewall6 package? FWIW: I did notice the action.AllowICMPs but I don''t know that I''m willing to be that liberal, yet. Thots? b. ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there''s a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you''ll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com
Brian J. Murrell wrote:> So I was just about to put my > > Ping/ACCEPT loc fw > > rule into my shorewall6 configuration and thought about the fact that > ipv6-icmp != ipv4-icmp. I went looking and noticed that macro.Ping is > in shorewall-common, but really, it''s only valid for IPv4 rules. > > So what''s the plan here? Putting IPv6 specific versions of macros into > the shorewall6 package?There is already a macro.Ping in the shorewall6 package. That is also documented. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there''s a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you''ll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com
On Wed, 2009-05-13 at 15:01 -0700, Tom Eastep wrote:> > There is already a macro.Ping in the shorewall6 package.Damn. Didn''t see that one. macro.Trcrt from /usr/share/shorewall/macro.Trcrt seems to be shorewall6 incompatible: Checking /etc/shorewall6/gw/rules... ERROR: ICMP not permitted in an IPv6 configuration : /usr/share/shorewall/macro.Trcrt (line 12) Do you want me to keep reporting these? b. ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects
Brian J. Murrell wrote:> On Wed, 2009-05-13 at 15:01 -0700, Tom Eastep wrote: >> There is already a macro.Ping in the shorewall6 package. > > Damn. Didn''t see that one. > > macro.Trcrt from /usr/share/shorewall/macro.Trcrt seems to be shorewall6 > incompatible: > > Checking /etc/shorewall6/gw/rules... > ERROR: ICMP not permitted in an IPv6 configuration : /usr/share/shorewall/macro.Trcrt (line 12) > > Do you want me to keep reporting these?Sure -- but at this point, don''t expect them to be fixed until 4.4. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects
On Fri, 2009-05-15 at 17:14 -0700, Tom Eastep wrote:> > Sure -- but at this point, don''t expect them to be fixed until 4.4.That''s fair enough. They are certainly easy enough to fix locally until then. Cheers, b. ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects