[Systems] IPv6 connectivity for Sugar Labs foundation

[Daniel Clark]

Bernie Innocenti wrote:
> El Fri, 07-08-2009 a las 13:38 -0400, James Jun escribió:
>> OCCAID will be happy to assist.  Where do you need the v6
>> service delivered at, at FSF location or MIT?  If your v6
>> termination equipment is hosted at FSF which is GNAPS
>> facility in Quincy, ask them to run a cross-connect for
>> you to Boston MXP. We can then shoot a vlan across MXP
>> switch fabric from OCCAID POP in Boston/1 Summer Street
>> and hand off v6 to you natively.
> 
> I'm quite unfamiliar with the FSF network equipment at GNAPs, to the
> point that I haven't yet even seen the physical box which hosts the
> main Sugar Labs machine.
> 
> I've been talking with Dan Benson of GNAPs (on cc) to figure out
> what needs to be done.  Danny Clark and Dan Jared of the FSF are
> going to get in contact with him to get the BGP router connected.
> 
> Thanks to everybody for being very helpful.

FYI danjared and bernie got tun6to4 working last night; we had just
missed the need to add a line to iptables on the FSF's BGP router,
ge-core1.qcy.gnu.org [1].

I think they are still looking at OCCAID, which danjared, who seems to
have the most clue in this area, thinks is a much better long-term solution.

[1] /etc/default/iptables-rules change
--- iptables-rules.aug10.from-filesystem	2009-08-10 23:20:16.000000000 -0400
+++ iptables-rules	2009-08-10 23:21:18.000000000 -0400
@@ -28,6 +28,9 @@

 -A input_block -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j
ACCEPT

+# bernie and danjared (w/ dclark): allow incoming 6to4 packets
+-A input_block -p ipv6 -j ACCEPT
+
 # Blacklisted hosts

 -A input_block -p tcp -m tcp --dport 80 --src 216.220.57.41 -j DROP

Cheers and thanks to everyone for the assistance,
-- 
Daniel JB Clark   | Sys Admin, Free Software Foundation
pobox.com/~dclark | http://www.fsf.org/about/staff#danny

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20090811/27092a07/attachment.pgp