ip6fw without ipfw?

Nikos Vassiliadis nvass at teledomenet.gr
Tue Nov 6 01:23:24 PST 2007


On Tuesday 06 November 2007 00:54:36 Bob Johnson wrote:
> So is it a bug or a feature that enabling ip6fw (/etc/rc.d/ip6fw
> start) also enables ipfw (the ipv4 version)? I didn't see it mentioned
> in IP6FW(8).
>
> It sure surprised me when I was exploring IPv6 setup and I enabled
> ip6fw without configuring the IPv4 rc.firewall.  Locked me out of the
> remote system, because ssh won't let me log in on IPv6 (I'll post that
> question in another message), and ipfw came up and locked me out via
> IPv4. Forced me to go out and enjoy the nice weather yesterday instead
> of playing with IPv6 all day...

Can't replicate what you said. I am running 6.2-STABLE from June.
I loaded the ip6fw module and ipfw is not loaded. I also ran the
ip6fw rc script. Nothing happened regarding ipfw.

root:0:/cdrom# ip6fw show
65535          0          0 deny ipv6 from any to any
root:0:/cdrom# ipfw show
ipfw: getsockopt(IP_FW_GET): Protocol not available

If you can replicate the problem, please report it.

Nikos


More information about the freebsd-questions mailing list