Re: new to NetBSD networking - two questions:

From: Igor Sobrado (igor_at_string1.ciencias.uniovi.es)
Date: 07/11/05 

Date: 11 Jul 2005 20:05:22 +0200

Christopher A. Kantarjiev <cak@dimebank.com> wrote:
>
> 1. I guess that the NetBSD ipf is equivalent to the OpenBSD pf. Should I just
> try using my ruleset from OpenBSD, or am I likely to come to grief?

NetBSD will support the OpenBSD pf very soon (perhaps it will be
in stable releases in a month or so). NetBSD ipf is not compatible
with pf (at least if you use pf-only features like "lists"). Can you
wait to NetBSD 3? It will be released soon.

> 2. I really don't want to run ipv6. How can I turn it off? Most programs are
> doing the right thing so far, but pkg_add insists on trying to contact via a
> host's ipv6 - even though I don't have any ipv6 routes installed (which means it
> just fails).

You can disable the

  options INET6 # IPv6

option in your kernel configuration file and build a new kernel. Are you
sure pkg_add is hanging when contacting with external hosts *using* IPv6?
Is it not a proxy issue? Try playing with PKG_PATH environment variable.

I will try to stop the output of this ftp(1) session as soon as possible
to estimate time to discover that "IPv6 is not available" (sadly, we are
not supporting IPv6 and 6to4 does not work on our network... 6-to-4
traffic filtered???):

-------------------------------------------
$ time ftp ftp.netbsd.org
Trying 2001:4f8:4:7:2e0:81ff:fe21:6563...
ftp: connect to address 2001:4f8:4:7:2e0:81ff:fe21:6563: No route to host
Trying 204.152.190.13...
Connected to ftp.netbsd.org.
220 ftp.NetBSD.org FTP server (NetBSD-ftpd 20040809) ready.
Name (ftp.netbsd.org:sobrado): ^C
        0.52 real 0.00 user 0.04 sys
-------------------------------------------

(sorry for this bad use of the anonymous FTP server at TNF...) :-)

It is really fast discovering that there is no route to ftp.netbsd.org
using IPv6. IMHO, IPv6 does not introduce a big overhead in communication.
Perhaps I am wrong but I heartly believe that it is good to have IPv6
enabled by default.

Very good luck!

Igor.

Relevant Pages

  • Re: Weird DNS Problem, Timeouts ipv6?
    ... " Unless you explicitly set addresses and routes or enable ... My OpenBSD 4.0 system disagrees with you. ... OpenBSD should be able to control and disable IPv6, ...
    (comp.unix.bsd.openbsd.misc)
  • Re: Forward: HEADS UP! Default value of ip6_v6only changed
    ... "OpenBSD also caused a lot of grief on the IPv6 front. ... intentionally broke their IPv6 stack to not allow IPv4 connections to and from ... IPv6 sockets using the IPv4 mapped addresses that the IPv6 standard defines ...
    (freebsd-current)
  • Re: IPv6 Tunnel Broker
    ... basically have people point their IPv6 ... basically you want to be a dual stack router, ... co-author, "Secure Architectures with OpenBSD" ...
    (comp.unix.bsd.openbsd.misc)