Re: ip6tables icmp conntracking on 2.6.18 vs 2.6.24

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 4 Apr 2008, martin f krafft wrote:

> also sprach Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx> [2008.04.03.1814 +0200]:
> > ICMPv6 non-error types (i.e. above type 128) - the exception of 
> > echo-request (128) and node information query (139)  - are not tracked 
> > yet, thus such packets are marked as INVALID.
> 
> Do you have a roadmap for this sort of stuff? Can we expect more
> IPv6 support for netfilter in 2.6.25?

Can't say much because the "missing" informational ICMPv6 messages 
either use multicast addresses or experimental/exotic.

Needless to say most of the problems comes from multicast.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux