Shorewall users - Mar 2011 - Shorewall IPv6 and RHEL-5

Hello!

I rent a virtual private server and use Shorewall on it. Now I have the
option of enabling IPv6 for it and am investigating application
compatibility. I''ve noticed the following FAQ entry:
http://www.shorewall.net/FAQ.htm#faq80a

As far as I can tell, the host system is RHEL-5 (5.5, I presume) using
kernel 2.6.18-028stab070.14. The hoster does not know about any issues
with stateful firewalls, that kernel and IPv6 as outlined in the FAQ. I
guess RedHat patched their kernel accordingly. Can someone verify my
assumption?

Thanks in advance!
Florian Philipp



------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev

On 3/3/11 9:57 AM, Florian Philipp wrote:
> Hello!
> 
> I rent a virtual private server and use Shorewall on it. Now I have the
> option of enabling IPv6 for it and am investigating application
> compatibility. I''ve noticed the following FAQ entry:
> http://www.shorewall.net/FAQ.htm#faq80a
> 
> As far as I can tell, the host system is RHEL-5 (5.5, I presume) using
> kernel 2.6.18-028stab070.14. The hoster does not know about any issues
> with stateful firewalls, that kernel and IPv6 as outlined in the FAQ. I
> guess RedHat patched their kernel accordingly. Can someone verify my
> assumption?
I cannot. To my knowledge, no RHEL-5 kernel supports stateful IPv6
filtering.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
What You Don''t Know About Data Connectivity CAN Hurt You
This paper provides an overview of data connectivity, details
its effect on application quality, and explores various alternative
solutions. http://p.sf.net/sfu/progress-d2d