LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 02-27-2009, 08:06 AM   #1
KlausM
LQ Newbie
 
Registered: Feb 2009
Posts: 1

Rep: Reputation: 0
best practice for IPv6 and service deployment


Hi,

I've been searching around in the Internet for quite a time to find some answers, but did not find satisfying ones.

We are in the process of deploying IPv6 in our infrastructure and got into some trouble. In the IPv4 world, we try to avoid running services using the root account, so if a service needs access to a port < 1024 (typically web services, but not limited to), we use ipnat to map the port to a higher port number.

According to my research, network address translation is regarded as a taboo by the IPv6 community, and my colleague from the network department claims that therefore there are no mapping capabilities on our firewalls (Juniper) for IPv6. It also seems to me that ipfilter neither supports NAT for IPv6 (while it supports filtering).

As I am not an expert on IPv6 and Linux/Unix system administration (yet, still working on it), it is not unlikely that I missed the point, so here is my question:

Is there any solution to
  • either to map a port below 1024 to a port above or equal to 1024 for an IPv6 address,
  • or to allow a non-root user to access a port below 1024

Thanks in advance for any kind of help

Klaus
 
  


Reply

Tags
ipv6, port forwarding, services


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Server deployment phru Linux - Server 9 03-12-2008 04:11 AM
How to set IPv6 address on IPv6 router tlemons Linux - Networking 3 09-17-2007 01:25 PM
Does RH Cluster Service 3 supports IPv6 addresses visra Linux - Enterprise 0 06-25-2007 07:22 AM
IPv6 deployment MBH Linux - Networking 0 08-08-2005 09:51 AM
DISCUSSION: IPv6 deployment buckwalter LinuxAnswers Discussion 0 11-26-2004 01:59 PM


All times are GMT -5. The time now is 02:32 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration