On Mon, Mar 09, 2009 at 08:38:23AM +0100, Stefano Zacchiroli wrote: > On Sun, Mar 08, 2009 at 08:34:23PM -0400, Roberto C. Sanchez wrote: > > Description : Shoreline Firewall (IPv6 version), netfilter configurator > > Uh? Can you please explain? > > Even though I'm not following the upstream evolution I'm a user of the > shorewall package, which has IPv6 support even though disabled by > default. Why we now need a separate package now? > Upstream releases now the following packages for 4.2.x: shorewall-common shorewall-docs shorewall-lite shorewall-perl shorewall-shell shorewall6 shorewall6-lite shorewall6 depends upon shorewall-perl (and consequently shorewall-common) in order to work properly. It is a different rules engine/compiler that handles IPv6 packet filtering. It was implemented separately because it is in many ways much simpler than IPv4 packet filter (e.g., there is no NAT in IPv6 and IPsec is part of the spec instead of requiring encapsulation). Regards, -Roberto -- Roberto C. Sánchez http://people.connexer.com/~roberto http://www.connexer.com
Attachment:
signature.asc
Description: Digital signature