On Friday 2012-11-16 11:38, Steve (Telsat Broadband) wrote: >Hi All, > >For one of my filtering rules, I'm trying to add the following rules: > >ip6tables -t mangle -I AuthCheck 1 -d ff::/8 -j RETURN ip6tables -t mangle >-I AuthCheck 1 -d fc::/7 -j RETURN > >However, when I check the rule entries they show up as ::/7, ::/8 [...] >Which obviously doesn't catch the packets as ::/7 or ::/8 is not fc::/7 or >ff::/8 ip6tables is absolutely correct. 00ff:0000:0000:0000 :0000:0000:0000:0000 (ff::) & ff00:0000:0000:0000 :0000:0000:0000:0000 (/8) = 0000:0000:0000:0000 :0000:0000:0000:0000 (::(/8)) 00fc:0000:0000:0000 :0000:0000:0000:0000 (fc::) & fe00:0000:0000:0000 :0000:0000:0000:0000 (/7) = 0000:0000:0000:0000 :0000:0000:0000:0000 (::(/7)) -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
