SHOREWALL6-PROXYNDP(5)
π NAME π
proxyndp β the Shorewall6 Proxy NDP file, bestie. it's literally the glow-up list for your proxied IPv6 addresses β¨
πΈ SYNOPSIS πΈ
/etc/shorewall6/proxyndp
π¦ DESCRIPTION π¦
okay so this file? iconic. it showed up in Shorewall 4.4.16 and it's where you define your Proxy NDP. one entry per IPv6 address you're proxying, no more no less. π
the columns go like this, and yes you have to keep them in order:
ADDRESSβ address β the IPv6 Address. just the address. that's it, that's the vibe. πINTERFACEβ interface (Optional) β the local interface where the system holding the ip address inADDRESSis connected. you only need this when theHAVEROUTEcolumn is left empty, or is set tonoorNo. lowkey optional, but not always πEXTERNALβ interface β the External Interface that gets used to reach this system from the Internet. πHAVEROUTEβ[-|Yes|No]β if there's already a route from the firewall to the host whose address you gave, typeYesoryesright here. otherwise typenoorNo, or just leave the column empty and Shorewall will add the route for you π«Ά. but here's the tea: if Shorewall6 adds the route, how long it sticks around depends on whether thePERSISTENTcolumn containsYes. if it doesn't, thenshorewall6 stoporshorewall clear6will straight up delete that route. πPERSISTENTβ[-|Yes|No]β ifHAVEROUTEisNoorno, this column decides whether the route Shorewall added survives ashorewall6 stopor ashorewall6 clear. putYesoryesin here and the route persists, periodt β¨. leave it empty or putNoornoand the route gets deleted byshorewall6 stoporshorewall6 clear. choose wisely bestie π
π EXAMPLE π
Example 1:
a host with IPv6 2001:470:b:227::44 is connected to interface eth1, and we want hosts attached via eth0 to be able to access it using that address. main character networking fr fr π
#ADDRESS INTERFACE EXTERNAL
2001:470:b:227::44 eth1 eth0
π FILES π
/etc/shorewall6/proxyndp
β SEE ALSO β
and the whole friend group, obviously:
shorewall6(8)shorewall6-accounting(5)shorewall6-actions(5)shorewall6-blacklist(5)shorewall6-exclusion(5)shorewall6-hosts(5)shorewall6-interfaces(5)shorewall6-maclist(5)shorewall6-nesting(5)shorewall6-netmap(5)shorewall6-params(5)shorewall6-policy(5)shorewall6-providers(5)shorewall6-rtrules(5)shorewall6-routestopped(5)shorewall6-rules(5)shorewall6.conf(5)shorewall6-secmarks(5)shorewall6-tcclasses(5)shorewall6-tcdevices(5)shorewall6-mangle(5)shorewall6-tos(5)shorewall6-tunnels(5)shorewall6-zones(5)
π§ NOTES π§
- https://shorewall.org/configuration_file_basics.htm#Pairs https://shorewall.org/configuration_file_basics.htm#Pairs
and that's the whole page bestie!! π this one's a Configuration Files girlie, dated 09/24/2020, and it lives under the name SHOREWALL6-PROXYNDP(5). go proxy those addresses, you absolute legend πβ¨
π¦ where this page comes from
- alpine 3.22: shorewall-doc 5.2.8-r1 Β· GPL-2.0-or-later
- alpine 3.23: shorewall-doc 5.2.8-r1 Β· GPL-2.0-or-later
- alpine 3.24: shorewall-doc 5.2.8-r1 Β· GPL-2.0-or-later
- debian bookworm: shorewall 5.2.8-2 Β· GPL-2.0-or-later
- debian trixie: shorewall 5.2.8-6 Β· GPL-2.0-or-later
- fedora 43: shorewall 5.2.8-17.fc43 Β· GPL-2.0-or-later
- fedora 44: shorewall 5.2.8-18.fc44 Β· GPL-2.0-or-later
- nixos 26.05: shorewall 5.2.8
- nixpkgs unstable: shorewall 5.2.8
- ubuntu noble: shorewall 5.2.8-5 Β· GPL-2.0-or-later
- ubuntu questing: shorewall 5.2.8-6
- ubuntu resolute: shorewall 5.2.8-6build1 Β· GPL-2.0-or-later
- ubuntu stonking: shorewall 5.2.8-6build1 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms