OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ian Prowell (ipmiscprowell.org)
Date: Wed Apr 03 2002 - 00:38:49 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Apr 03, 2002 at 05:04:13AM +0200, Rémi Guyomarch wrote:
    > "(encap)"... hmm, isn't your IPv6 connection in fact a GIF tunnel or
    > something like that ? In this case you must filter on the
    > pseudo-interface instead of xl0.
    >
    > --
    > Rémi
    If the machine is a host using 6 in 4 encapsulation you will need to filter on the appropriate GIF interface, but if the machine a router or a host on an IPv6 native network and has IPv6 addresses assigned to real interfaces then you can filter on the real interface too. The GIF interface is just used to encapsulate IPv6 traffic over an IPv4 network. It is not necessarily required for IPv6.

    -Ian