Ipv6 for the content provider

Randy McAnally rsm at fast-serv.com
Mon Jan 31 18:29:18 UTC 2011


On Mon, 31 Jan 2011 11:53:22 -0600, Blake Hudson wrote

> > # ip6tables -A INPUT -m state --state ESTABLISHED -j ACCEPT

> I guess the next question is whether or not it actually works correctly....

You can open/shut ports but you can't do anything with connection state
(RELATED, ESTABLISHED, ect).  For example, you have to open all upper inbound
ports manually if you want to complete outbound connections.

The solution is to manually build your own kernel from a vanilla source, along
with all the problems that entails.

~Randy





More information about the NANOG mailing list