Hey all,
I just did a fresh network install of FC6 from rawhide and it is still
creating busted firewall rules for IPv6. If this isn't fixed during the
release slip, FC6 will release with a totally disfunctional IPv6 stack
due to those broken firewall rules. I understand that the kernel
features being referenced are experimental and are not even enabled in
the shipping kernel. So we should be generating ANY rules with "--m
state" in them for IPv6 because they will not work. The present
configuration has to change so that ip6tables is not attempting to use
features that are not even enabled in the shipping kernel or the IPv6
networking code will not function at all, as all packets are being
blocked.
Mike
--
Michael H. Warfield (AI4NB) | (770) 985-6132 | mhw(a)WittsEnd.com
/\/\|=mhw=|\/\/ | (678) 463-0932 |
http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!