On 11/04/2010 07:08 AM, Stephen Clark wrote:
Now, the upstream (ISP-assigned) prefix changes to
2001:6b2f:1705::/48. RA will handle reassigning addresses to actual
downstream hosts, but things that explicitly encode IPv6 addresses
need to be changed, and that includes ip6tables, in this case these
rules now need to refer to 2001:6b2f:1705:0000::/52,
2001:62bf:1705:1000::/52 and so on.
Won't this break existing tcp connections if all of a sudden you get a
new address?
Yes. Welcome to the brave new world of IPv6. One of many reasons why
IPv6 IMO is seriously misdesigned, but it's what we have and we no
longer have the time to do anything else.
-hpa
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
