IOS not saving evaluate rule in access-list

Posted by DeeJay1 on Server Fault See other posts from Server Fault or by DeeJay1
Published on 2011-01-10T10:19:32Z Indexed on 2011/01/10 10:55 UTC
Read the original article Hit count: 225

Filed under:

firewall

|

ios

Hi.

I have a basic firewall set up on an pretty od IOS in form of

IPv6 access list exterior-in6
  evaluate exterior-reflect sequence 1
  permit ipv6 any host [my external address] sequence 10
  permit tcp any host [my internal address] eq 22 sequence 11
  permit icmp any any sequence 800
  permit udp any any range 6881 6889 sequence 900
  permit tcp any any range 6881 6889 sequence 901
  deny ipv6 any any sequence 1000
IPv6 access list exterior-out6
  permit ipv6 [my internal subnet] any reflect exterior-reflect sequence 10

Unfortunately the

evaluate exterior-reflect sequence 1

line seems to get lost after each reboot, leaving my internal network without access. Any ideas?

© Server Fault or respective owner

Related posts about firewall

Managed hosting firewall vs managing own firewall

as seen on Server Fault - Search for 'Server Fault'
I posted on stackoverflow as to the overall benefits of managed hosting vs non-managed hosting. The more I think about it, it seems to boil down to one question: should I use a managed host because they take care of the firewall, or would I be okay managing my own, software firewall? The sites… >>> More
Hardware firewall vs VMWare firewall appliance

as seen on Server Fault - Search for 'Server Fault'
We have a debate in our office going on whether it's necessary to get a hardware firewall or set up a virtual one on our VMWare cluster. Our environment consists of 3 server nodes (16 cores w/ 64 GB RAM each) over 2x 1 GB switches w/ an iSCSI shared storage array. Assuming that we would be dedicating… >>> More
Firewall behind firewall

as seen on Server Fault - Search for 'Server Fault'
I've recently changed jobs and I've been set up with a new workstation. On all previous places where I've been working they've had some sort of local firewall installed on each and every workstation - but here I've been told not to activate it because it is not necessary since we're already behind… >>> More
We have no SW Firewall behind our office HW firewall, admin says its not req'd

as seen on Server Fault - Search for 'Server Fault'
I've recently changed jobs and I've been set up with a new workstation. On all previous places where I've been working they've had some sort of local firewall installed on each and every workstation - but here I've been told not to activate it because it is not necessary since we're already behind… >>> More
Can't get FTP to work on centOS 5.6

as seen on Server Fault - Search for 'Server Fault'
Hi guys I have been trying for a few hours to install and get FTP to work... I did yum install ftp and yum install vsftpd They all installed and are running but when I try to use filezilla or some other client I just can't connect....I've tried connecting on port 21 and port 990 ....nothing! These… >>> More

Related posts about ios

Regarding Xcode SDK IOS 4.2 installation and missing iOS 4.1

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi All, i have download Xcode SDK 4.2(xcode_3.2.5_and_ios_sdk_4.2_final.dmg) from Apple developer site and installed successfully . when open my old xcode project it shows baseSDk missing ,when i try to change project setting ,i have found and set base SDk as 4.2 it works fine my problem is ,in… >>> More
fatal: pathspec for removing folder in git

as seen on Super User - Search for 'Super User'
I want to remove a folder from a Git repository but I get an error. I tried several commands, and here you can see my errors: selnaz:iOS Lnaz$ ls iOS-Tidinfo mockup readme.txt selnaz:iOS Lnaz$ git rm -r -- iOS-Tidinfo/ fatal: pathspec 'tidinfo/iOS/iOS-Tidinfo/' did not match any files selnaz:iOS… >>> More
Autorotate works for iOS 6 but gives weird behavior in iOS 5

as seen on Stack Overflow - Search for 'Stack Overflow'
I seem to be having the opposite problem from this post: Autorotate in iOS 6 has strange behaviour When I submitted my paid app to Apple, XCode made me update to iOS 6 on my test devices. I used the GUI in XCode to set my app to display only in portrait mode on the iPhone and only in landscape… >>> More
App is getting run in iOS 5.1.1 but crashed in iOS 6.1.3

as seen on Stack Overflow - Search for 'Stack Overflow'
I have implemented below code but app has been crashed in iPad with iOS version 6.1.3,while running perfectly in iPad with iOS version 5.1.1. when I am scrolling table view continuously it is crashed in ios version 6.1.3. what could be the issue. The implemented delegate and data source methods for… >>> More
No provisioned iOS devices are available with a compatible iOS version

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to test my app on an iPhone 3G, however I'm getting this error: No provisioned iOS devices are available with a compatible iOS version. Connect an iOS device with a recent enough version of iOS to run your application or choose an iOS simulator as the destination. Note that: The 3G… >>> More