nanog mailing list archives

Re: Ipv6 for the content provider


From: "Randy McAnally" <rsm () fast-serv com>
Date: Mon, 31 Jan 2011 13:29:18 -0500

On Mon, 31 Jan 2011 11:53:22 -0600, Blake Hudson wrote

# ip6tables -A INPUT -m state --state ESTABLISHED -j ACCEPT

I guess the next question is whether or not it actually works correctly....

You can open/shut ports but you can't do anything with connection state
(RELATED, ESTABLISHED, ect).  For example, you have to open all upper inbound
ports manually if you want to complete outbound connections.

The solution is to manually build your own kernel from a vanilla source, along
with all the problems that entails.

~Randy



Current thread: