IPv6 ICMP and iptables

[Florian Zavatzki]

Hi,

when I create a IPv6 ruleset and try to load it via ip6tables-restore I get the following error:
ip6tables-restore v1.4.8: unknown option `--icmp-type'

There seems to be a error in the creation of inet6 ICMP rulesets with icmp-type in the iptables and speedway target.
I have replaced the --icmp-type parameter by --icmpv6-type and now everything works fine, so I created a workaround (see the attach patch).

I also have problems with the connection tracking with ICMPv6. When there is state option in the rule the rule will not match the ICMP packet, even if the state is NEW, ESTABLISHED, RELATED.
Do you know more about this issue? At the moment I have patched lib/iptables.py to not set state options for the protocol icmpv6.

Bye,
Florian

[Tony Watson]

Florian,

Thanks for catching this and reporting it along with a patch. I've integrated the patch at revision 167.

I'll roll out a fixed .tar.gz shortly.

Once again, your help is greatly appreciated!

--

Tony