SHOREWALL6-PROXYNDP(5)

πŸ“¦
version 5.2.8 Β· 2 versions
  • 5.2.8 Β· alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 5.2.3.4 Β· ubuntu jammy
, in alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– NAME πŸ’–

proxyndp β€” the Shorewall6 Proxy NDP file, bestie. it's literally the glow-up list for your proxied IPv6 addresses ✨


🌸 SYNOPSIS 🌸

/etc/shorewall6/proxyndp

πŸ¦‹ DESCRIPTION πŸ¦‹

okay so this file? iconic. it showed up in Shorewall 4.4.16 and it's where you define your Proxy NDP. one entry per IPv6 address you're proxying, no more no less. πŸ’…

the columns go like this, and yes you have to keep them in order:

  • ADDRESS β€” address β€” the IPv6 Address. just the address. that's it, that's the vibe. πŸ’œ
  • INTERFACE β€” interface (Optional) β€” the local interface where the system holding the ip address in ADDRESS is connected. you only need this when the HAVEROUTE column is left empty, or is set to no or No. lowkey optional, but not always πŸ™ˆ
  • EXTERNAL β€” interface β€” the External Interface that gets used to reach this system from the Internet. 🌈
  • HAVEROUTE β€” [-|Yes|No] β€” if there's already a route from the firewall to the host whose address you gave, type Yes or yes right here. otherwise type no or No, or just leave the column empty and Shorewall will add the route for you 🫢. but here's the tea: if Shorewall6 adds the route, how long it sticks around depends on whether the PERSISTENT column contains Yes. if it doesn't, then shorewall6 stop or shorewall clear6 will straight up delete that route. πŸ’€
  • PERSISTENT β€” [-|Yes|No] β€” if HAVEROUTE is No or no, this column decides whether the route Shorewall added survives a shorewall6 stop or a shorewall6 clear. put Yes or yes in here and the route persists, periodt ✨. leave it empty or put No or no and the route gets deleted by shorewall6 stop or shorewall6 clear. choose wisely bestie πŸ’…

πŸŽ€ EXAMPLE πŸŽ€

Example 1:

a host with IPv6 2001:470:b:227::44 is connected to interface eth1, and we want hosts attached via eth0 to be able to access it using that address. main character networking fr fr πŸ‘‘

#ADDRESS             INTERFACE       EXTERNAL
2001:470:b:227::44   eth1            eth0

πŸ“ FILES πŸ“

/etc/shorewall6/proxyndp


⭐ SEE ALSO ⭐

and the whole friend group, obviously:


🧚 NOTES 🧚

  1. https://shorewall.org/configuration_file_basics.htm#Pairs https://shorewall.org/configuration_file_basics.htm#Pairs

and that's the whole page bestie!! 🌈 this one's a Configuration Files girlie, dated 09/24/2020, and it lives under the name SHOREWALL6-PROXYNDP(5). go proxy those addresses, you absolute legend πŸ’–βœ¨