Forgot your password?
typodupeerror

Comment: My stateful ipv6 fiewall rules (Score 1) 278

by cms108 (#19041845) Attached to: Obsession With Firewalls Could Hinder IPv6
This lets me route all of my million billion zillion ip addresses in my /48 with no NAT and no inbound stuff allowed at all unless initiated from the inside.

block in on pppoe0 all
pass out quick on pppoe0 proto tcp/udp from xxxx:xxx:xxx::/48 to any keep state
pass out quick on pppoe0 proto ipv6-icmp from xxxx:xxx:xxx::/48 to any keep state
Whew... That was really hard to set up.

Wasn't there something about a PASCAL programmer knowing the value of everything and the Wirth of nothing?

Working...