#6 ip6tables: state match

[Nils Altendorf]

Due to connectiontracking problems (i think its a
kernel problem; ip6 firewalling is new) packets with
RELATED or ESTABLISHED state will not be matched. The
workaround is, that the configfile contains the options
IP6_FW_OPEN_STCPPORTS and IP6_FW_OPEN_SUDPPORTS wich
opens the system for all connections comming from these
ports. For ftp connections it's important *not* to use
the passive mode.
It's not secure!!!
But it works for the moment ;)