nanog mailing list archives
Re: IPv6 gateway, was: Re: IPv6 foot-dragging
From: Jeroen van Aart <jeroen () mompl net>
Date: Fri, 13 May 2011 14:32:48 -0700
Jeroen van Aart wrote:
-I FORWARD -i eth0 -s 2001:db8::/64 -j ACCEPT -I FORWARD -i eth1 -d 2001:db8::/64 -j ACCEPT
Just in case if anyone'd be using it as an example. It's a good idea to make your rules more restrictive.
Something like: -I FORWARD -j DROP -I FORWARD -s 2001:db8::/64 -j ACCEPT -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -- http://goldmark.org/jeff/stupid-disclaimers/ http://linuxmafia.com/~rick/faq/plural-of-virus.html
Current thread:
- IPv6 gateway, was: Re: IPv6 foot-dragging Jeroen van Aart (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Jeroen van Aart (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Jeroen van Aart (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Owen DeLong (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Jeroen van Aart (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Owen DeLong (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Owen DeLong (May 13)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Todd Lyons (May 16)
- Re: IPv6 gateway, was: Re: IPv6 foot-dragging Erik Muller (May 17)