The majority of ICMPv6 types including 135 are not stateful, therefore you
must place rules to accept packets in both directions before you test for
state INVALID.
PIng type 128 is one that is stateful, that is why it works.
Steven.
--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
No comments:
Post a Comment