Re: Shorewall6 start error

Hello,

Do I need to enable any flags in the kernel ?
I see *nf_reject_ipv4 module and I did not see that for ipv6.*

root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# lsmod | grep ipv4
*nf_reject_ipv4         16384  1 ipt_REJECT*
nf_log_ipv4            16384  3
nf_log_common          16384  2 nf_log_ipv4,nf_log_ipv6
nf_defrag_ipv4         16384  1 nf_conntrack
root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# lsmod | grep ipv6
nf_log_ipv6            16384  0
nf_log_common          16384  2 nf_log_ipv4,nf_log_ipv6
nf_defrag_ipv6         16384  1 nf_conntrack


Thanks,
Nag

On Thu, Dec 9, 2021 at 2:26 PM Tuomo Soini <[email protected]> wrote:

> On Wed, 8 Dec 2021 19:35:57 +0530
> Nagarjun J <[email protected]> wrote:
>
> Regexp issues need to be addresses but those are /not/ error.
>
> > *ip6tables-restore v1.8.3 (legacy): unknown option
> > "--reject-with"Error occurred at line: 110Try `ip6tables-restore -h'
> > or 'ip6tables-restore --help' for more information.   ERROR:
> > iptables-restore Failed. Input is in*
>
> This is your error. For some reason ip6tables-restore doesn't understand
> what you have defined for proxyndp.
>
> Why do you need proxyndp? Any isp should give you network which
> is bigger than /64 so you can just do routing and don't need to do
> proxyndp. Giving single network would be violation of rfcs, everybody
> need proper IPv6 block from their isp, like /60 at minimum (16
> networks) or /56 (256 networks).
>
> --
> Tuomo Soini <[email protected]>
> Foobar Linux services
> +358 40 5240030
> Foobar Oy <https://foobar.fi/>
>
>
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>