Re: IPv6 FTP problems

Darren Reed <[email protected]> Tue, 07 Jul 2009 09:48:28 -0700
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <10820_1246985451_4A537CEA_10820_13635_1_4A537C5C.6070802@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Chris Ross wrote:
| On Tuesday 07 July 2009 02:37:06 Darren Reed wrote:
| > Is there a filtering rule that should let the connection through for 
IPv6?
|
|   I don't know.  The outgoing connection works, it's the incoming that
| doesn't.
|
| > The proxy handles both address translation as well as creating state to
| > allow the data connection through.
|
|   Okay.  Then I think that may be the problem.  I have the proxy lines 
in my
| ipnat.conf set to activate for specific IPv4 source addresses.  I 
assume I'll
| need to set similar rules for the IPv6 network(s) I have so that the proxy
| will correctly trigger the pinhole for the return traffic.
|
|   Does that go into ipnat.conf as well, with similar syntax?

Yes & you'll need to update to IPFIlter 5.x in order to bring in IPv6 NAT.

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkpTfFwACgkQP7JIXtvLbFWLowCeM0zQX+UQ0ZdDxpJBQBoUaVdq
qDoAnjyBi9QYrgDxSmvWst/TO+81sjXD
=mQjW
-----END PGP SIGNATURE-----