thorpej@zembu.com (Jason R Thorpe) writes:
> You should always prefer IPv6 anyway. :-)

So how do you protect the v6 daemons?  (Other than by source IP
address only, which I don't really feel comfortable doing.)

I can't figure out how to get ipfilter to "block all" and only allow
certain v6 ports in.  It works fine for normal v4.  Tunneled v6
packets are a bit more challenging...

-wolfgang
-- 
       Wolfgang Rupprecht <wolfgang+gnus@dailyplanet.wsrcc.com>
		    http://www.wsrcc.com/wolfgang/
Coming soon: GPS mapping tools for Open Systems. http://www.gnomad-mapping.com/