- This topic is empty.
November 23, 2010 at 10:11 am #42741marcoskfMember
Does anyone know how activate IPv6 support in bridge/qos mode in Zeroshell ???
I’m testing in my dual stack network and ipv6 traffic is blocking by zeroshell.
Can anyone help me ?
Marcos (UNESP – Sao Paulo University)December 9, 2010 at 2:45 pm #51352AtroposXMember
Looks like if you use Schoopy’s development image, and follow my steps on that thread, then go into /Database/linux-220.127.116.11, and run the command “make menuconfig”, in there, there are some ipv6 options that are disabled, you can enable them, exit, and save the config.
I have not tested it yet though, just found that those options are there. Still looking around on how to shape the traffic though, perhaps with tc somehow, rather than an iptables rule.
I see that the iptables module “ipmark”, which is not part of ZS modules, states some things about ipv6 shaping. Hope this helpsDecember 9, 2010 at 8:31 pm #51353AtroposXMember
Looks like instead of using iptables, you can use ip6tables. ip6tables appears to already be built as a command. “ip6tables -h” states the help list and all of its options. ip6tables should be able to use “-j MARK –set-mark X” to tag packets to a class.
Instead of using:
iptables -A FORWARD -s 192.168.1.100/32 -j MARK –set-mark 0x39
you could instead use:
ip6tables -A FORWARD -s 2001:618:x::x -j MARK –set-mark 0x39
to shape an ipv6 address’s outbound traffic in a bridge
but, i get an error when trying to filter traffic.
“FATAL: Module ip6_tables not found.”
“ip6tables v1.4.0: can’t initialize ip6tables table ‘filter’: Address family not supported by protocol”
“Perhaps ip6tables or your kernel needs to be upgraded.”
Still in the process of trying to enable in kernel though…
Looks like the same thing with ipp2p, it is usable to view the help and its options, but it is not built into the kernel, thus not usable to filter traffic.
- You must be logged in to reply to this topic.