Default ip6tables rules

Dawid Gajownik gajownik at gmail.com
Wed Oct 18 15:42:31 UTC 2006


Dnia 10/17/2006 04:31 PM, Użytkownik Michael H. Warfield napisał:
> 	There's a conflict in there.  The default IPv6 ip6tables rules are
> using experimental features in the kernel which are not enabled and
> which would break IPv4 NAT and MASQ (and who knows what) if they were
> enabled.  Basically, stateful filtering is fubared and breaks the IPv6
> networking if you try to use it.  They need to drop back to stateless
> filtering for ip6tables before release of FC6 (unless it's slipped sooo
> far back that we end up with the 2.6.20 kernel where it's expected to
> work) or the whole v6 stack is blocked if you have those rules enabled.

Thank you for the excellent explanation!

> 	That's why it's rawhide.  :-)

That's the reason why I use it -- I can learn lots of new stuff when 
things go crazy ;-)

Regards,
	Dawid
-- 

   ^_*





More information about the fedora-test-list mailing list