OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Rémi Guyomarch (rguyompobox.com)
Date: Wed Apr 03 2002 - 15:00:53 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Tue, Apr 02, 2002 at 10:38:49PM -0800, Ian Prowell wrote:
    > On Wed, Apr 03, 2002 at 05:04:13AM +0200, Rémi Guyomarch wrote:
    > > "(encap)"... hmm, isn't your IPv6 connection in fact a GIF tunnel or
    > > something like that ? In this case you must filter on the
    > > pseudo-interface instead of xl0.

    > If the machine is a host using 6 in 4 encapsulation you will need to
    > filter on the appropriate GIF interface, but if the machine a router
    > or a host on an IPv6 native network and has IPv6 addresses assigned
    > to real interfaces then you can filter on the real interface too.
    > The GIF interface is just used to encapsulate IPv6 traffic over an
    > IPv4 network. It is not necessarily required for IPv6.

    Yes, and this is exactly why I was asking if his IPv6 connection was
    tunneled or not. 

    -- 
Rémi