|To:||Quantum Scientific <Info@xxxxxxxxxxxxxxx>|
|Subject:||Re: Kernel 2.6 IPV6 Busted|
|From:||Andre Tomt <andre@xxxxxxxx>|
|Date:||Sun, 27 Feb 2005 18:40:07 +0100|
|User-agent:||Mozilla Thunderbird 1.0 (Windows/20041206)|
Quantum Scientific wrote:
After a week of intensive research and full-time study, it's become clear that IPV6 support, as it comes in standard Linux 2.6 kernels, is effectively non-functional.
Connection tracking (as in stateful firewalling) do not a useful ipv6 stack make.. The stack works fine, at least the stack provided in 2.6 kernels. The 2.4 stack is severely out of date, however, but should "work".
Connection tracking is on the way, currently a implementation exists in the netfilter.org patch-o-matic svn.
I must stay with the Debian kernel.
Debian ships 2.6.8 with ipv6 enabled in Sarge. Not sure about Woody, but its ought to be rather outdated by now ;-)
I can't believe the native kernel's IPV6 is so primitive. I can't believe any kernel developers are actually using IPV6. And I can't believe that anyone is actually using IPV6 with the Debian kernel. The Debian IPV6 mailing list is full of spam, and brought viruses and scams to my door when I subscribed. No one I've asked questions of has mentioned any of this at all, so if there is an answer, it is clearly a secret.
So is there something I'm missing? Am I completely fscked-up when I say that it doesn't work in practice, because there is no stateful packet filtering nor connection tracking?
You seem to be fixed on the idea that a ipv6 stack has to have stateful firewalling, or else its utter crap, correct? :-)
Not all hosts need firewalling at all, or firewalling is provided by routers/firewalls for them. I use ipv6 in production networks, on Linux, without special patches.
|<Prev in Thread]||Current Thread||[Next in Thread>|
|Previous by Date:||Re: Kernel 2.6 IPV6 Busted, YOSHIFUJI Hideaki / 吉藤英明|
|Next by Date:||Re: Kernel 2.6 IPV6 Busted, Quantum Scientific|
|Previous by Thread:||Re: Kernel 2.6 IPV6 Busted, Quantum Scientific|
|Next by Thread:||Re: Kernel 2.6 IPV6 Busted, Quantum Scientific|
|Indexes:||[Date] [Thread] [Top] [All Lists]|