[address-policy-wg] Re: [ipv6-wg] Commercial IPv6 firewall support

On Fri, 26 Oct 2007, michael.dillon at bt.com wrote:

> Some people have claimed that they cannot yet sell
> IPv6 Internet access because there is no IPv6 firewall
> support. According to this ICANN study:
> http://www.icann.org/committees/security/sac021.pdf
> this is not quite true. At least 30% of the 42 vendors
> surveyed, had IPv6 support.
> 
> According to this talk 
> <http://www.guug.de/veranstaltungen/ecai6-2007/slides/2007-ECA-I6-Status
> -IPv6-Firewalling-PeterBieringer-Talk.pdf> 
> many open-source and commercial firewalls supporting IPv6 are available.
> 
> IPCop is based on Linux
> <http://www.ipcop.org/index.php?module=pnWikka&tag=IPCopScreenshots>
> 
> m0n0wall is based on FreeBSD
> <http://m0n0.ch/wall/screenshots.php>
> 
> pfSense is also based on FreeBSD
> <http://pfsense.com/index.php?id=26>
> 
> FWBuilder is a management tool that builds filter setups for 
> several different firewalls.
> <http://www.fwbuilder.org/archives/cat_screenshots.html>

[...]

I am not really sure this list contains routers that really really
supports tested IPv6 routing, or just of those that say they do. For
example FWBuilder here does not support IPv6 other than (from the
changelog in the latest version) "... option to the firewall settings
dialog for iptables that controls whether compiler should skip
generation of the code to set default policy of all ipv6 chains to
DROP", and that is all v6 support there I can find.

-- 
patrik_wallstrom->foodfight->pawal at blipp.com->+46-733173956