From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: Re: Enable tools for IPv6 Date: Wed, 05 Aug 2015 17:19:20 +0100 Message-ID: <1438791560.2448.65.camel@ipfire.org> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5026461212628013569==" List-Id: --===============5026461212628013569== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit On Wed, 2015-08-05 at 17:59 +0200, Larsen wrote: > On Wed, 05 Aug 2015 17:31:36 +0200, Michael Tremer > wrote: > > > On Wed, 2015-08-05 at 17:27 +0200, Larsen wrote: > > > On Wed, 05 Aug 2015 12:28:01 +0200, Michael Tremer > > > wrote: > > > > > > > IPFire 3 is ready for IPv6. I would appreciate much more to > > > > focus > > > > on > > > > that then and then finally get rid of IPFire 2. > > > > > > Ok, fair enough. > > > There are precompiled binaries for the needed tools, so this > > > shouldn´t > > > pose a problem. > > > > I think that is even worse. When ever we patch those binaries they > > will > > be overwritten on these systems. > > > I guess this problem exists for different aspects of manually getting > IPv6 > to work on IPFire 2.x. For example, have a look at the following > files > that will be edited and might possibly be overwritten. Yes, these are all system files and they *will* be overwritten at some time. > /etc/sysconfig/modules I have no idea why all these modules need to be loaded manually. The respective tools like ip6tables, strongswan and so on will do that when needed. > /etc/sysctl.conf It is probably better to create /etc/sysctl.d and then have a file in that directory that overwrites the default settings in /etc/sysctl.conf > /etc/resolv.conf There is no need to resolve names over IPv6 and circumvent dnsmasq. This will disable DNSSEC. Add the name server to the dnsmasq configuration and you will be fine. > /etc/modprobe.d/ipv6.conf (deleted) This can be moved to a sysctl setting and then solved as described above. > > http://wiki.ipfire.org/en/add-ipv6/extend/nativ > /etc/init.d/network > > Therefore, we don't really need the tools to be IPv6-enabled. It > would > just have made things one step easier. You will need this in dnsmasq if you want to keep DNSSEC. > > > So, I have added a warning here: > http://wiki.ipfire.org/en/add-ipv6/ipv6/extended I changed that. IPv6 support is finished in IPFire 3. Some smaller things like prefix delegation for PPP is not entirely tested and robust, but it should work well enough. > > Lars -Michael --===============5026461212628013569== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjEKCmlRSWNCQUFC Q2dBR0JRSlZ3amVJQUFvSkVJQjU4UDl2a0FrSGhQa1AvMUJyMEZYN2pZRkpYdWpxQUJXdlluSnMK ZEE3TWdKRU12MENTV1lGOFl6SkpJQTcvM3NsVENWUlphNllEanpaMkkzbUhRNWhwc0ZwWU0xSnVp OVA4RDhGcwowOG93TDRzeTRhNmh1dGFlOHpZZFlSUDlFVGtaVkl6eFV0SzJPcElwNmhhaGNyK3lk Tnd1SkxWQVNkK2wvK2ZNCllnMWZRWVM4bTQzd1l3UFJ3UkE3SVJjTVJ2M2RPVDJKVlo0dmVBUnVi QjN6WUlNNk1aQTg2NEF6Z1o3cnhUa2EKMXYxRnJ4bWhCYmNuV0tDemVMQTdTN3Q1emVhN214bDZq MTNlUnY5UGM3TkxUL1pwQk5mcEt0elRCQVdZcldDQgpaTER2ZkltWVpGQU1RNWpDZ2FxUm0wdk1O N2RSSEdQcFJVeTRzV2tlOXloZS9GZWo5ZzVZN3o0czU3TUs4Vi9QCk9xSTFLQTQyc3MvdHJGYUFq V2NYTVU4cm0rSlRHVjBxWGs0VGgwR0dXVWIvNjN2eDVncFFmTmREcFAweGRsMjAKRzJ0QkpwNWx5 ZGF4Nys3MFlaYnZqUE5KQnZPcFZORGw0aUpVWko2c2FEa2NQTjJhVXlPdE9IUXk0ak9tdmFNQwps U2RhSTV6d0FxYXRGL01QRUVERFYzNlphaGxSck53dkNmd0RXaGpmT1NnWkxaSy9uM090ZkZ1RUhQ VGQ1RU5TCnNMMllrQ3RuUVNrQTE2L0FzNVhtSGx5cEpZRG9lbVh6cEtHU3VzMnB5TXI0c1BQcVRZ eUorS2ZMOG1NUUpSdUYKUGQ2MTFidmFDSTl4K3dPcEErQk9Mc3g2VEVkQ3J0Y0xINzZxZFRZdEZ4 aWFoOVJabW1vRVpsTlQ4NVFURDZ1OQpnd21ZUnc0bEUzcFF0WmhzTVpzTAo9STg4NgotLS0tLUVO RCBQR1AgU0lHTkFUVVJFLS0tLS0K --===============5026461212628013569==--