Commits on Jul 11, 2024

1. Always enable global IPv6 forwarding …

   Global forwarding works differently for IPv6:
     conf/all/forwarding - BOOLEAN
      Enable global IPv6 forwarding between all interfaces.
   	  IPv4 and IPv6 work differently here; e.g. netfilter must be used
   	  to control which interfaces may forward packets and which not.
   https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
   
   It is not possible to configure the IPv6 forwarding per interface by
   setting the net.ipv6.conf.<ifname>.forwarding sysctl. Instead,
   the opposite approach is required where the global forwarding
   is enabled and an iptables policy is added to restrict it by default.
   
   To ensure consistent behavior between IPv4/IPv6 and limit the
   forwarding scope for IPv4 networks this commit configures the default
   DROP policy for all configured IP families.
   
   Signed-off-by: Patryk Diak <pdiak@redhat.com>

   

   kyrtapz committed Jul 11, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 681f7ca
   • Browse repository at this point

   Copy the full SHA

   681f7ca View commit details

   Browse the repository at this point in the history