Re: router_ra pppoe and firehol ?!

Phil Whineray <[email protected]> Tue, 14 Jul 2015 07:27:15 +0100

Newsgroups	gmane.comp.security.firewalls.firehol.user
Message-ID	<[email protected]>

On Mon, Jul 13, 2015 at 11:31:25PM +0200, Tamer Higazi wrote:
> Doesn't work :(

[snip]

> interface46 ppp+ inet
>          server ipv6error accept
>          server ipv6neigh accept
>          server icmp accept
>          server icmpv6 accept
>          server tvoip accept
>          client all accept

Any reason you didn't include ipv6router or was it just an accident?

In any case, that is the service to allow RA packets, which are the ones
needed to have a public prefix assigned in stateless autoconfiguration.
I think you already identified that in your earlier message.

You need to be a client for ipv6router, and for ipv6neigh (in addition
to being a server for ipv6neigh), as shown at
http://firehol.org/upgrade/#config-version-6

Hope that helps
Phil
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support