From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wg0-x22d.google.com (mail-wg0-x22d.google.com [IPv6:2a00:1450:400c:c00::22d]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 0D8E820003D for ; Wed, 15 Jan 2014 12:06:35 -0800 (PST) Received: by mail-wg0-f45.google.com with SMTP id n12so2246001wgh.0 for ; Wed, 15 Jan 2014 12:06:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=4RePcuKbNKILT3+VbyI5wlySqnSQm+RrZ7w0jxgvA8c=; b=smz7jQ1rAc5lOi7RKioTbQGm/9TsW9pgLzbzZe6o61AHimunPajzGyRy+uLCM0msEJ U+12YLgSheKRspP8GcfIi5zDEp0iO3L3NEQMUyUzGi//R42E9XVqx4jTCbPQ1/Rx3FOt xKK2fwi7F9W/8SkYZ+wfE08IevsRnDS5rvf0MIvW2F9DY/7TpuJiZBbH6ieUdj4WJRBr nLpUQ+yCDW5aBM5neo1qjLOS7ZJnmbBUlzFKi/9xMvaP8mYt8zbto913sJpbQCzfISFq gDXIc65zbqnzmB6nofr2aj7Zd52PRrV6aAAnsWedvCiwB0CI/Typr7nMPoSRPo9NubsM nH8A== MIME-Version: 1.0 X-Received: by 10.180.211.39 with SMTP id mz7mr4168944wic.53.1389816393775; Wed, 15 Jan 2014 12:06:33 -0800 (PST) Received: by 10.217.123.69 with HTTP; Wed, 15 Jan 2014 12:06:33 -0800 (PST) In-Reply-To: References: Date: Wed, 15 Jan 2014 15:06:33 -0500 Message-ID: From: Dave Taht To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: Re: [Cerowrt-devel] ipsets in openwrt issues X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jan 2014 20:06:49 -0000 On Wed, Jan 15, 2014 at 2:46 PM, Dave Taht wrote: > I thought ipset had sprouted full ipv6 support a while back > > which would make for simpler rules like this > > ipset create egress-ipv4 hash:net > > ipset add egress-ipv4 127.0.0.0/8 > ipset add egress-ipv4 192.168.0.0/16 > ipset add egress-ipv4 10.0.0.0/8 > ipset add egress-ipv4 172.16.0.0/12 > ipset add egress-ipv4 169.254.0.0/16 > > where you could do something like add the external > network on a double natted situation easily, on > bringing up the external interface. > > ipset add egress-ipv4 10.0.1.0/24 nomatch > > but no ipv6 in my build although the doc claims > it exists. > > ipset create family inet6 egress-ipv6 > ipset add egress-ipv6 fd::/10 > > reading source.... problem between eyes and keyboard... ipset create egress-ipv6 hash:net family inet6 ipset add egress-ipv6 fc::/10 # 8? 12? 11? what ... don't know what exact ipv6 addresses to block escaping out > > > -- > Dave T=E4ht > > Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscrib= e.html --=20 Dave T=E4ht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.= html