[Savannah-cvs] [490] SavannahHosts update networking setup

[bob]

Revision: 490
          
http://svn.savannah.gnu.org/viewvc/?view=rev&root=administration&revision=490
Author:   rwp
Date:     2022-10-20 22:20:58 -0400 (Thu, 20 Oct 2022)
Log Message:
-----------
SavannahHosts update networking setup

Modified Paths:
--------------
    trunk/sviki/SavannahHosts.mdwn

Modified: trunk/sviki/SavannahHosts.mdwn
===================================================================
--- trunk/sviki/SavannahHosts.mdwn      2022-10-21 02:12:34 UTC (rev 489)
+++ trunk/sviki/SavannahHosts.mdwn      2022-10-21 02:20:58 UTC (rev 490)
@@ -319,8 +319,7 @@
     ln -sfn /run/resolvconf/resolv.conf /etc/resolv.conf
       ... This may be best to let happen automatically after a reboot
 
-Fixup /etc/network/interfaces for both IPv4 and IPv6.  Also at the
-present time a simple iptables firewall is loaded with a pre-up rule.
+Fixup /etc/network/interfaces for both IPv4 and IPv6.
 
     auto lo
     iface lo inet loopback
@@ -327,14 +326,14 @@
 
     auto eth0
     iface eth0 inet static
-      address 208.118.235.XX/24
-      gateway 208.118.235.1
-      dns-search savannah.gnu.org gnu.org
-      pre-up iptables-restore < /etc/default/iptables-rules || :
+           address 209.51.188.XX/24
+           gateway 209.51.188.1
+           dns-search savannah.gnu.org gnu.org
 
-The above is incomplete as it only has the IPv4 address template and
-does not include IPv6.  The IPv6 section will be updated in a future
-edit.
+    iface eth0 inet6 static
+            pre-up echo 0 > /proc/sys/net/ipv6/conf/eth0/accept_dad
+            address 2001:470:142:5::XX/48
+            gateway 2001:470:142::1
 
 The /etc/resolv.conf file should be managed by resolvconf but isn't
 apparently set correctly.  Initially set this to bootstrap.
@@ -344,18 +343,6 @@
     nameserver 208.118.235.134
     nameserver 46.43.37.71
 
-Install the machine specific iptables firewall.  This is a very custom
-file that has many details of every IP address and subnet.
-
-    /etc/default/iptables-rules (much fixup needed)
-
-Future directions: Bob's comment: I do not much care for the raw
-iptables firewall rules.  It is like programming in machine code.  Of
-course if you can't do it in machine code then it can't be done.
-However everything is so tedious in machine code.  I prefer to use a
-higher level language.  I would like to switch this to Shorewall which
-is a much easier to use firewall compiler.
-
 Install postfix.  Select "Internet site".
 
     apt-get install --purge postfix