Text 16537, 74 rader
Skriven 2013-06-06 11:27:18 av Markus Reschke (2:244/1661)
  Kommentar till text 16535 av Benny Pedersen (2:230/0)
Ärende: drunk?
==============
Hello Benny!

Jun 06 00:21 2013, Benny Pedersen wrote to Markus Reschke:

 BP> try again, i had made a firewall error in shorewall6

$ ping6 -c 3 linode.junc.eu
PING linode.junc.eu(2a01:7e00::f03c:91ff:fe69:4ef7) 56 data bytes
64 bytes from 2a01:7e00::f03c:91ff:fe69:4ef7: icmp_seq=1 ttl=54 time=56.5 ms
64 bytes from 2a01:7e00::f03c:91ff:fe69:4ef7: icmp_seq=2 ttl=54 time=39.1 ms
64 bytes from 2a01:7e00::f03c:91ff:fe69:4ef7: icmp_seq=3 ttl=54 time=39.5 ms

--- linode.junc.eu ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 39.186/45.093/56.573/8.118 ms

That looks much better!

 BP> in shorewall6 i have /etc/shorewall6/rules
 BP> Ping/ACCEPT net $FW

 BP> with should be the iptables setup, just without your limits

I suggested the packet rate limit to mitigate any ICMP misuse. For IPv4 it was
easy to setup a set of rules to allow just the very essential message types.
For IPv6 it's another story since it uses ICMP heavily (SLAAC, ND and so on
depend on ICMP). There's even a dedicated RFC for filering ICMPv6 (RFC 4890). 


 MR>> What about -f then? ;-)

 BP> is it black humor ?

I guess so :-)


 BP> node 2:244/1661 -6 * -

 BP> without this line binkd try default -4 first i know /etc/gai.conf 
 BP> should checked more closely

Something like
  precedence ::ffff:0:0/96  100
will do the job.


 BP> made it work for me, you can now see me in your logs with my ipv6 
 BP> addr with i like to know :)

My log states:

+ 06 Jun 00:25:14 [17372] incoming session with 2a01:7e00::f03c:91ff:fe69:4ef7
(57696)
- 06 Jun 00:25:14 [17372] SYS Benny Pedersen


 BP> btw latest binkd is running now on linode.junc.eu both on ipv4 and 
 BP> ipv6, so test to hell with it :)

There aren't much nodes with IPv6 support yet. Actually you're the first one
connecting via IPv6, besides my own testing.


 BP> for geeks google what servers linode running, i am up with gentoo 
 BP> 64bit less then 3 days with them, even i had to compile ALL installed 
 BP> things !

We love DIYing :-)

Regards,
Markus

--- 
 * Origin: *** theca tabellaria *** (2:244/1661)