[135991] in North American Network Operators' Group
Re: Ipv6 for the content provider
daemon@ATHENA.MIT.EDU (Simon Perreault)
Mon Jan 31 12:49:26 2011
Date: Mon, 31 Jan 2011 12:48:34 -0500
From: Simon Perreault <simon.perreault@viagenie.ca>
To: nanog@nanog.org
In-Reply-To: <4D46F3AF.2000809@ispn.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 2011-01-31 12:38, Blake Hudson wrote:
> I was under the impression that the later versions of 5 (e.g. 5.5, 5.6)
> had backported stateful connection tracking. Has anyone tested recently?
The command
# ip6tables -A INPUT -m state --state ESTABLISHED -j ACCEPT
works on CentOS 5.5. And there's no documentation for it in "man
ip6tables". So it fits the backport hypothesis...
Simon
--
DTN made easy, lean, and smart --> http://postellation.viagenie.ca
NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca
STUN/TURN server --> http://numb.viagenie.ca