Re: x_tables userspace

[Pablo Neira Ayuso <pablo@eurodev.net>]

Michal Rokos wrote:
> now when x_tables are merged one question has to come:
> 
> Is there any userspace prog that can manage x_tables? Something like ip46tables?

No, this does not suppose any change from userspace side. It's just part
 of the ipv4-ipv6 code reunification.

> (All I really want is to finally use ipv6 stateful netfilter. And when
> iptables and ip6tables are already merged somewhere it would be
> great!)

Stateful ipv6 went into 2.6.15, so you can give it a try in this -rc1.
Just check the following boxes:

Network packet filtering (replaces ipchains) ---> Core Netfilter
Configuration  --->  Layer 3 Independent Connection tracking (EXPERIMENTAL)

And then add support for IPv4 and IPv6:

Network packet filtering (replaces ipchains) ---> IP: Netfilter
Configuration --->  IPv4 support for new connection tracking (EXPERIMENTAL)

Network packet filtering (replaces ipchains) ---> IPv6: Netfilter
Configuration (EXPERIMENTAL)  --->  IPv6 support for new connection
tracking (EXPERIMENTAL)

Previously, don't forget to uncheck the old connection tracking support.
Otherwise the IPv6 support won't be available.

-- 
Pablo