2

IPv6 forwarding from LAN problem

view story
linux-howto

http://forums.opensuse.org – I have an openSUSE 11.2 server configured as my firewall/server and ipv4 NAT router for my LAN. I have an ipv6 tunnel configured on it. All traffic to and from the server over ipv6 works just fine. All ipv4 traffic from the LAN gets masqueraded correctly. However, I cannot seem to route ipv6 traffic from my LAN. From the internal machine I can ping the firewall ipv6 address and my end of the sit tunnel. Any ipv6 traffic from the LAN seems to be getting dropped by SuSEfirewall2. The following appears in /var/log/firewall on the router: Jan 4 21:42:54 curly kernel: [32782.435572] SFW2-FWDint-DROP-DEFLT IN=eth0 OUT=sit1 SRC=2001:0470:1f07:0a4f:0000:0000:0000:0044 DST=2001:0770:0018:aa40:0000:0000:c101:c140 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=48408 SEQ=1 From this I can see that it appears to select the correct route from the internal network interface 'eth0' to the ipv6 tunnel 'sit1' but it is getting dropped. The following is what is happening on the internal client machine PING ftp.ipv6.heanet.ie(ftp.heanet.ie) 56 data bytes From 2001:470:1f07:a4f::1 icmp_seq=1 Destination unreachable: Address unreachable From 2001:470:1f07:a4f::1 icmp_seq=2 Destination unreachable: Address unreachable Does anyone have any suggestions? Thanks, Mike (Distributions)