kern/61544: ip6fw breakage on (at least) sparc64

Roderick van Domburg r.s.a.vandomburg at student.utwente.nl
Sun Jan 18 12:10:19 PST 2004


The following reply was made to PR kern/61544; it has been noted by GNATS.

From: "Roderick van Domburg" <r.s.a.vandomburg at student.utwente.nl>
To: <freebsd-gnats-submit at FreeBSD.org>,
	<r.s.a.vandomburg at student.utwente.nl>
Cc:  
Subject: Re: kern/61544: ip6fw breakage on (at least) sparc64
Date: Sun, 18 Jan 2004 21:03:57 +0100

 Perhaps clearer:
 
 00100 allow ipv6 from any to any via lo0
 00200 allow ipv6-icmp from :: to ff02::/16
 00300 allow ipv6-icmp from fe80::/10 to fe80::/10
 00400 allow ipv6-icmp from fe80::/10 to ff02::/16
 00500 allow ipv6 from fe80::/10 to ff02::/16
 00600 allow ipv6 from 2001:610:1908::/48 to ff02::/16
 00700 allow tcp from any to any established
 00800 allow ipv6 from any to any frag
 00900 allow tcp from any to 2001:610:1908:8000:a00:20ff:fecf:c01b 22 setup
 01000 allow tcp from any to 2001:610:1908:8000:a00:20ff:fecf:c01b 25 setup
 01100 allow tcp from any to 2001:610:1908:8000:a00:20ff:fecf:c01b 80 setup
 01200 allow tcp from 2001:610:1908:8000:a00:20ff:fecf:c01b to any setup
 01300 deny tcp from any to any setup
 01400 allow udp from any 53 to 2001:610:1908:8000:a00:20ff:fecf:c01b
 01500 allow udp from 2001:610:1908:8000:a00:20ff:fecf:c01b to any 53
 01600 allow ipv6-icmp from any to any icmptype 33
 01700 allow ipv6-icmp from any to any icmptype 34
 65535 deny ipv6 from any to any
 


More information about the freebsd-bugs mailing list