[8.161][QUESTION][ANSWERED] IPv6 Filter Rules

Hi,

just setup IPv6 with Freenet6 Tunnel Broker again (1st running on latest v8 stable fine)
now i need to set up a filter rule for example Internal v4/v6 -> Any -> Internet IPv6 (or Any V6) to allow every internal device to use IPv6.
in last v8 stable there was no need to.

my clients (mostly Macs) have temporary IPv6 Adresses (Privacy Extensions enabled) so i CANNOT insert the IPv6 to their Host-Defintion in order the already defined v4 rules apply to ipv6 too.
on last stable i had no ipv6 rule - the ASG managed to allow ipv6 just by compare the ipv4 and asking v6 adress (i think) and then use the v4 rule for the v6 query...

is there any way a prefix-assigned computer can be "statically" added to a Filter Rule? Or is it a bug?

Thanks,

Martin

0 Astaro Beta Bot over 14 years ago

Astaro Beta Report

--------------------------------

Version: 8.161

Type: QUESTION

State: ANSWERED

Reporter: guawhitehawk

Contributor: RFCat_vk

MantisID: 

Target version: 

Fixed in version: 

--------------------------------

0 RFCat_vk_01 over 14 years ago in reply to Astaro Beta Bot

Hi,
don't your packet filter rules have a little 6 symbol beside the 4 symbol indicating the packet filter rule applies to both stacks.

I am using a sixxs tunnel and all my packet filters migrated over from 8.1 to 8.2b.
I will check my MAC tonight to see how it behave with IPv6 and update this post.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 da_merlin over 14 years ago

Privacy Extension should not be enabled by default on MaxOSX, see
Apple Mac OS X IPv6 - IPv6 Intelligence

There was no change in the packetfilter rules, 8.200 behaves exactly the same as 8.100.

If you want packetfilter rules based on Host IPv6 adresses, you have to disables the Privacy Extension.
If disabling the Privacy Extensions is not an option, have a look at the new "User Authentication Client" in latest beta, but only Windows is supported so far. This Client
will work with Privacy Extensions and update the User Network Objects...

Cheers
Ulrich
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 guawhitehawk over 14 years ago in reply to da_merlin

So disabling privacy extensions is not an option.
and dhcpv6 client is not existent in latest stable OSX 10.6.7.
so i have to enter and address manually or add a rule for all ipv6 routing. and thats what i did so far.

thanks for all answers
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel