Re: HEADSUP: IP6FW removed

On Fri, May 12, 2006 at 11:27:33PM +0200, Max Laier wrote:
> Hi,
> 
> FYI:
> 
> mlaier      2006-05-12 20:39:23 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     sbin                 Makefile
>     sys/conf             files options
>     sys/modules          Makefile
>     sys/net              net_osdep.h
>     sys/netinet          ip_fw2.c
>     sys/netinet6         ip6_forward.c ip6_input.c ip6_output.c
>   Removed files:
>     sbin/ip6fw           Makefile ip6fw.8 ip6fw.c sample.sh
>     sys/modules/ip6fw    Makefile
>     sys/netinet6         ip6_fw.c ip6_fw.h
>   Log:
>   Remove ip6fw.  Since ipfw has full functional IPv6 support now and - in
>   contrast to ip6fw - is properly locked, it is time to retire ip6fw.
> 
> Known issues:
>  - ipfw2 is *not* a perfect in-place replacement for ip6fw.  Rules might
> need slight rewriting to work.  You can use the changes in rc.firewall6
> as a reference.  Now that IPv4 and v6 are integrated one should be able
> to write much more elegant rulesets to manage both IPv4 and v6.
>  - rc.firewall6 will flush rules from rc.firewall.  I am still looking for
> a clever way how to integrate rc.firewall and rc.firewall6 - patches
> welcome!

Thanks for you all your work on this!

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4