- 17.1. Common information
- 19.1. Node security
- 19.2. Access limitations
- 20.1. Modes of using encryption and authentication
- 20.2. Support in kernel (ESP and AH)
- 20.3. Automatic key exchange (IKE)
- 20.4. Additional informations:
- 22.6. ISC Dynamic Host Configuration Server (dhcpd)
- 22.7. DHCP Server Dibbler
- 22.8. tcp_wrapper
- 22.7. 22.9. vsftpd
- 22.8. 22.10. proftpd
- 22.9. 22.11. Other daemons
- 23.2. Other programming languages
Hints for configuration)
17.1. Common information
17.1.1. Node Mobility
17.1.2. Network Mobility
17.1.3. Links
18.1.1. More information
18.2. Preparation
18.2.1. Get sources
18.2.2. Extract sources
18.2.3. Apply latest iptables/IPv6-related patches to kernel source
18.2.4. Configure, build and install new kernel
18.2.5. Rebuild and install binaries of iptables
18.3. Usage
18.3.1. Check for support
18.3.2. Learn how to use ip6tables
18.3.2.1. List all IPv6 netfilter entries
18.3.2.2. List specified filter
# ping6 -i eth0 ff02::1:2 |
The client has one foreground and two debug toggles, here is an example:
default-lease-time 600;
+max-lease-time 7200;
+log-facility local7;
+subnet6 2001:db8:0:1::/64 {
+ range6 2001:db8:0:1::129 2001:db8:0:1::254;
+ option dhcp6.name-servers fec0:0:0:1::1;
+ option dhcp6.domain-search "domain.example";
+} |
22.6.2. Usage
22.6.2.1. dhcpd
Start server in foreground:
# /usr/sbin/dhcpd -6 -f -cf /etc/dhcp/dhcpd.conf eth1 +Internet Systems Consortium DHCP Server 4.1.0 +Copyright 2004-2008 Internet Systems Consortium. +All rights reserved. +For info, please visit http://www.isc.org/sw/dhcp/ +Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file +Wrote 0 leases to leases file. +Bound to *:547 +Listening on Socket/5/eth1/2001:db8:0:1::/64 +Sending on Socket/5/eth1/2001:db8:0:1::/64 |
22.7. DHCP Server Dibbler
Dibbler is also a DHCP server
22.7.1. Configuration of the Dibbler DHCP server for IPv6
22.7.1.1. Simple configuration
Create a dedicated configuration file /etc/dibbler/server.conf . Note, that the router requires to have a interface configured with an IPv6 address out of the defined subnet.
log-level 8
+log-mode short
+preference 0
+iface "eth1" {
+ // also ranges can be defines, instead of exact values t1 1800-2000 t2 2700-3000
+ prefered-lifetime 3600
+ valid-lifetime 7200
+ class {
+ pool 2001:6f8:12d8:1::/64
+ }
+ option dns-server fec0:0:0:1::1
+ option domain domain.example
+} |
22.7.2. Usage
22.7.2.1. dibbler-server
Start server in foreground:
# dibbler-server run +| Dibbler - a portable DHCPv6, version 0.7.3 (SERVER, Linux port) +| Authors : Tomasz Mrugalski<thomson(at)klub.com.pl>,Marek Senderski<msend(at)o2.pl> +| Licence : GNU GPL v2 only. Developed at Gdansk University of Technology. +| Homepage: http://klub.com.pl/dhcpv6/ +2009.05.28 10:18:48 Server Notice My pid (1789) is stored in /var/lib/dibbler/server.pid +2009.05.28 10:18:48 Server Notice Detected iface eth0/3, MAC=54:52:00:01:23:45. +2009.05.28 10:18:48 Server Notice Detected iface eth1/2, MAC=54:52:00:67:89:ab. +2009.05.28 10:18:48 Server Notice Detected iface lo/1, MAC=00:00:00:00:00:00. +2009.05.28 10:18:48 Server Debug Skipping database loading. +2009.05.28 10:18:48 Server Debug Cache:server-cache.xml file: parsing started, expecting 0 entries. +2009.05.28 10:18:48 Server Notice Parsing /etc/dibbler/server.conf config file... +18:48 Server Debug Setting 0 generic option(s). +18:48 Server Debug 0 per-client configurations (exceptions) added. +18:48 Server Debug Parsing /etc/dibbler/server.conf done. +18:48 Server Info 0 client class(es) defined. +18:48 Server Debug 1 interface(s) specified in /etc/dibbler/server.conf +18:48 Server Info Mapping allow, deny list to class 0:0 allow/deny entries in total. +18:48 Server Info Interface eth1/2 configuration has been loaded. +18:48 Server Notice Running in stateful mode. +18:48 Server Info My DUID is 00:01:00:01:11:aa:6d:a7:54:52:00:67:89:ab. +18:48 Server Notice Creating multicast (ff02::1:2) socket on eth1/2 (eth1/2) interface. +18:48 Server Debug Cache: size set to 1048576 bytes, 1 cache entry size is 87 bytes, so maximum 12052 address-client pair(s) may be cached. +18:48 Server Notice Accepting connections. Next event in 4294967295 second(s). |
22.6. tcp_wrapper22.8. tcp_wrapper
tcp_wrapper is a library which can help you to protect service against misuse.
22.6.1. Filtering capabilities22.8.1. Filtering capabilities
You can use tcp_wrapper for
22.6.2. Which program uses tcp_wrapper22.8.2. Which program uses tcp_wrapper
Following are known:
22.6.3. Usage22.8.3. Usage
tcp_wrapper is controlled by two files name /etc/hosts.allow and /etc/hosts.deny. For more information see
22.6.3.1. Example for /etc/hosts.allow22.8.3.1. Example for /etc/hosts.allow
In this file, each service which should be positive filtered (means connects are accepted) need a line.
22.6.3.2. Example for /etc/hosts.deny22.8.3.2. Example for /etc/hosts.deny
This file contains all negative filter entries and should normally deny the rest using
22.6.4. Logging22.8.4. Logging
Depending on the entry in the syslog daemon configuration file /etc/syslog.conf the tcp_wrapper logs normally into /var/log/secure.
22.6.4.1. Refused connection22.8.4.1. Refused connection
A refused connection via IPv4 to an xinetd covered daytime service produces a line like following example
22.6.4.2. Permitted connection22.8.4.2. Permitted connection
A permitted connection via IPv4 to an xinetd covered daytime service produces a line like following example
22.7. vsftpd22.9. vsftpd22.7.1. Listening on IPv6 addresses22.9.1. Listening on IPv6 addresses
Edit the configuration file, ususally /etc/vsftpd/vsftpd.conf, and adjust the listen option like
22.8. proftpd22.10. proftpd22.8.1. Listening on IPv6 addresses22.10.1. Listening on IPv6 addresses
Edit the configuration file, ususally /etc/proftpd.conf, but take care, not 100% logical in virtual host setup
22.9. Other daemons22.11. Other daemonsNowadays it's mostly simple, look for either a command line option or a configuration value to enable IPv6 listening. See manual page of the daemon or check related FAQs. It can happen that you can bind a daemon only to the IPv6-“any”-address (::) and not to bind to a dedicated IPv6 address, because the lack of support (depends on that what the programmer has implemented so far...).
23.1.1. Address Structures
23.1.1.1. IPv4 sockaddr_in
23.1.1.2. IPv6 sockaddr_in6
23.1.1.3. Generic Addresses
23.1.2. Lookup Functions
23.1.3. Quirks Encountered
23.1.3.1. IPv4 Mapped Addresses
23.1.3.2. Cannot Specify the Scope Identifier in /etc/hosts
23.1.3.3. Client & Server Residing on the Same Machine
23.1.4. Putting It All Together (A Client-Server Programming Example)
Porting applications to IPv6 HowTo. For the record, the source code presented here is original, developed from scratch, and any similarity between it and any other publicly available 'daytime' example is purely coincidental.]. The source code presented in this section was developed and tested on a RedHat Linux release using the 2.6 kernel (2.6.9 to be specific). Readers may use the source code freely, so long as proper credit is attributed; but of course the standard disclaimer must be given first:
23.1.4.1. 'Daytime' Server Code
23.1.4.2. 'Daytime' TCP Client Code
23.1.4.3. 'Daytime' UDP Client Code
23.2. Other programming languages
23.2.1. JAVA
23.2.2. Perl
25.1.1. Printed Books (English)
25.1.1.1. Cisco
25.1.1.2. General
25.1.2. Articles, eBooks, Online Reviews (mixed)
25.1.4. Others
25.2.1. 2004
25.3.2. Latest news and URLs to other documents
25.3.3. Protocol references
25.3.3.1. IPv6-related Request For Comments (RFCs)
25.3.3.2. Current drafts of working groups
25.3.3.3. Others
25.3.4. More information
25.3.4.1. Linux related
25.3.4.2. Linux related per distribution
25.3.4.3. General
25.3.5. By countries
25.3.5.1. Europe
25.3.5.2. Austria
25.3.5.3. Australia
25.3.5.4. Belgium
25.3.5.5. Brasil
25.3.5.6. China
25.3.5.7. Czech
25.3.5.8. Germany
25.3.5.9. France
25.3.5.10. Italy
25.3.5.11. Japan
25.3.5.12. Korea
25.3.5.13. Mexico
25.3.5.14. Netherland
25.3.5.15. Portugal
25.3.5.16. Russia
25.3.5.17. Switzerland
25.3.5.18. United Kingdom
25.3.6. By operating systems
25.3.6.1. *BSD
25.3.6.2. Cisco IOS
25.3.6.3. HPUX
25.3.6.4. IBM
25.3.6.5. Microsoft
25.3.6.6. Solaris
25.3.6.7. Sumitoma
25.3.6.8. ZebOS
25.3.8. Application lists
25.3.8.1. Analyzer tools
25.3.8.2. IPv6 Products
25.4. IPv6 Infrastructure
25.4.1. Statistics
25.4.2. Internet Exchanges
25.4.4.4. Radio Stations, Music Streams
25.6.1. Testing tools
25.6.2. Information retrievement
25.6.3. IPv6 Looking Glasses
25.6.4. Helper applications
Chapter 26. Revision history / Credits / The End
26.1.1. Releases 0.x
- 0.64
2009-05-28/PB: extend DHCP server examples (ISC DHCP, Dibbler)
- 0.63
26.2.2. Other credits