os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Regen from rev.1.73.2.9.

Browse source
This commit is contained in:
Hiroki Sato 2005-11-26 21:58:30 +00:00
parent 7b5fdd3b15
commit fed62f90a5
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/www/; revision=26437
1 changed files with 44 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

45
en/releases/6.0R/errata.html
View file

@ -20,7 +20,7 @@ alink="#0000FF">
Documentation Project</p>
<p class="PUBDATE">$FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v
1.73.2.8 2005/11/19 19:20:56 hrs Exp $<br />
1.73.2.9 2005/11/26 21:57:27 hrs Exp $<br />
</p>
<div class="LEGALNOTICE"><a id="TRADEMARKS" name="TRADEMARKS"></a>
@ -103,6 +103,49 @@ target="_top">ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/</a>.</p>
<h2 class="SECT1"><a id="KNOWN-PROBLEMS" name="KNOWN-PROBLEMS">4 Known Problems and
Solutions</a></h2>
<p>(2005/11/26) On 6.0-RELEASE, the following <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a> rule is
interpreted in a different way from the previous releases:</p>
<pre class="PROGRAMLISTING">
allow ipv6 from 192.168.0.2 to me
</pre>
<p>When <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a> does not
support IPv6 (see the next entry for the details), <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(8)</span></a> accepts
this rule and this blocks an IPv6 packet encapsulated in an IPv4 packet (IPv6-over-IPv4
tunneling, protocol number 41) whose source address is <tt
class="LITERAL">192.168.0.2</tt>. When it supports IPv6, on the other hand, this means a
rule to allow an IPv6 packet from <tt class="LITERAL">192.168.0.2</tt>, and actually <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(8)</span></a> rejects
this rule because the syntax is incorrect (&#8220;an IPv6 packet from an IPv4
address&#8221; never happens). Unfortunately there is no simple workaround for this
problem.</p>
<p>The <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a> IPv6
support still has rough edges and there are other problems due to incompatibility between
the two. As a workaround for them, you can use a combination of IPv4-only <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a> and <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ip6fw&sektion=8&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ip6fw</span>(8)</span></a>, which
is almost compatible with the prior releases, instead of <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a> with
IPv6 support. To disable IPv6 support of <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a>, use the
<tt class="FILENAME">ipfw.ko</tt> kernel module and do not use the kernel option <tt
class="LITERAL">IPFIREWALL</tt>.</p>
<p>(2005/11/19) Although the FreeBSD 6.0-RELEASE Release Notes states that <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+6.0-stable">
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">ipfw</span>(4)</span></a>