On 10/07/11 20:34, Randy Kramer wrote: > >> Also, ipv6 firewalling is very annoying on the gateway (due to the >> icmpv6 filtering which must be done right). When possible, get a >> script that does most of it right for you (or check RFC 4890). > > Sounds like good advice. > > Randy Kramer > shorewall6 is quite good at setting the rules for IPv6.