Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 Basics & Questions & General Chatter => Topic started by: colonelf74 on June 30, 2012, 12:27:39 PM

Title: IPv6 Firewalling Question
Post by: colonelf74 on June 30, 2012, 12:27:39 PM
I know this is rather sad, it's actually more of a subnetting question.

Basically, I have several hosts happily doing their thing in IPv6, and now I want to add
firewall rules to my Apple Airport such that at least I have some policies setup for the network(deny SSH, that sort of thing).

Following is a mondo dump of my IPv6 world...and my question is what IPv6 network address can I feed my firewall such that I can add rules without specifically referencing individual hosts?

From /etc/hosts:

# IPv6 Address Space
2002:47ef:368b::21f:f3ff:fe40:8aa    somename-wifi
2002:47ef:368b::217:f2ff:fecf:69a    somename-mac
2002:47ef:368b::21f:f3ff:fecf:9ee0    somename-macbook
2002:47ef:368b::70ba:a66a:1ead:9f61    wilson
2002:c058:6301::            gateway

From "ifconfig -a":

    ether 00:1f:f3:cf:9e:e0
    inet6 fe80::21f:f3ff:fecf:9ee0%en0 prefixlen 64 scopeid 0x4
    inet6 2002:47ef:368b::21f:f3ff:fecf:9ee0 prefixlen 64 autoconf
    inet6 2002:47ef:368b::a9e3:5eaa:2ced:714d prefixlen 64 autoconf temporary
    inet netmask 0xffffff00 broadcast
    media: 1000baseT <full-duplex,flow-control>
    status: active

Any advice would be greatly appreciated.
Title: Re: IPv6 Firewalling Question
Post by: colonelf74 on July 02, 2012, 11:09:16 AM
Nevermind, I got it all figured out.  As it turns out, Apple's Airport Extreme just doesn't go there.

Big thanks to broquea for teaching me about "ndp", and a huge thank you to Hurricane Electric for their IPv6 TunnelBroker.  It was great while it lasted.  Heck, I'd run the service even now, but that'd be dishonest(Comcast has issues, man).