Hi all,
are there any plans to implement "ipv6_local_port_range" in the
future like on IPv4?
BTW: for all the IPv6 freaks and kernel 2.4 users: I've already
brought netfilter6 on my gateway server up to life (thanks to
netfilter & ext3 developers) and add some hints in my HowTo relating
to this:
http://www.bieringer.de/linux/IPv6/IPv6-HOWTO/IPv6-HOWTO-8.html
netfilter6 is currently not fullfeatured and work in progress, but
packet filtering works and for security issues it's really better
than nothing!
I recommend to insert following rules on (tunnel) interface(s) to
block incoming TCP connections requests like:
ip6tables -I INPUT -i sit+ -p tcp --syn -j DROP
ip6tables -I FORWARD -i sit+ -p tcp --syn -j DROP
Modify the "-i" option, if your interface(s) to the global IPv6
network are named different.
Peter
|