Re: [Fwbuilder-discussion] IPv6 and IPv4 rules

[Vadim K. ✎ <va...@vk...>]

On Feb 1, 2009, at 8:51 AM, Sven Anders wrote:

> Hi,
> i have just tested fwbuilder 3.0.3 as i want to change my network to  
> make it
> IPv6 ready.
>
> * I have to add routing for IPv4 and IPv6 but I can not find a: "Add  
> Routing
> Rule Set" (like you can find a "Add Policy Rule Set".)
>

Currently there can be only one routing ruleset. This may change in  
the future.

> There are some more questions, which I can not find in the webpages  
> (they are
> not important for me, but I want to learn more):
>
> * What ist: The Security level (0-100), is it used by a firewall?

security level is only used for PIX firewalls.


>
> * What will the Actions: Queue, Mark Custom and Routing do in a  
> Policy?
>

these translate into QUEUE, MARK, ROUTE targets if you use iptables.  
For other firewall platforms, they translate into configuration  
parameters that perform similar functions. Custom action allows the  
user to configure iptables target that otherwise is not supported  
directly, this is useful when you want to generate iptables rule using  
particular module.


> * IPv6: Must I add the addresses with the scope link, to the  
> firewall, or are
> the global addresses used, when I assing them to my networks?!



fwbuilder does not care, it just generates firewall config.


--
Firewall Builder project: http://www.fwbuilder.org
Twitter: vk999