From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
To: Mark Ryden <markryde@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: ipv6 forwarding without netfilter
Date: Sat, 31 Jul 2010 19:47:43 +0200 [thread overview]
Message-ID: <4C5461BF.1000604@plouf.fr.eu.org> (raw)
In-Reply-To: <AANLkTik0MPyj4Vthm1fFXA56yEMW-a5FJ_vP6+-U+WhQ@mail.gmail.com>
Hello,
Mark Ryden a écrit :
> According to this link:
> http://www.faqs.org/docs/Linux-HOWTO/Linux+IPv6-HOWTO.html#FIREWALLING-NETFILTER6
>
> "In IPv6 you can't control forwarding per device, forwarding control
> has to be done using IPv6-netfilter (controlled with ip6tables)
> rulesets and specify input and output devices (see
> Firewalling/Netfilter6 for more). This is different to IPv4, where
> you are able to control forwarding per device (decision is made on
> interface where packet came in). "
>
> My question is:
> Suppose you don't want to control forwarding in IPv6 on a certain
> device, just forward packets which are received on any device.
> I am not sure that this howto is relevant.
> Is it true that in order to achieve IPV6 forwarding you must use
> netfilter rule ?
No.
> Is it possible to achieve forwarding simply by running:
> echo "1" /proc/sys/net/ipv6/conf/all/forwarding
>
> without setting any ip6tables netfilter rule ?
Yes.
If you don't need filtering, you don't need ip6tables.
next prev parent reply other threads:[~2010-07-31 17:47 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-07-31 14:44 ipv6 forwarding without netfilter Mark Ryden
2010-07-31 17:47 ` Pascal Hambourg [this message]
2010-07-31 21:23 ` ABPNI
2010-07-31 21:27 ` Jan Engelhardt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4C5461BF.1000604@plouf.fr.eu.org \
--to=pascal.mail@plouf.fr.eu.org \
--cc=markryde@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox