Welcome to ft6 -- Firewall Tester for IPv6's Documentation!¶

The "Firewall Tester for IPv6", or ft6, is a tool you can use to test how your firewall handles IPv6. This document covers the basic architecture of ft6, how to install it, set it up and run it. We explain the tests and what to make of the results. We even show how to build your own test yourselves! Some familiarity with the the TCP/IP Stack and IPv6 in particular is assumed.

This document and ft6 itself are being released under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 license. ft6 was written in cooperation with EANTC as part of the project IPv6 Intrusion Detection System, funded by BMBF.

Contents¶

• The Architecture
• Running ft6
  • Requirements
  • Setting Up
  • Running
• Understanding the Tests
• Interpreting the Results
• Hacking ft6

Slides/Talks¶

Testing IPv6 Firewalls with ft6 [pdf]
Oliver Eggert, Troopers 14, Heidelberg, 17.-21. March 2014

Testing IPv6 Firewalls with ft6 [video]
Oliver Eggert, IPv6 Hackers Meeting, Berlin, 30. July 2013

Troubleshooting¶

Ran into a problem? Please check the versions of your software first! ft6, in its version of 2019, was developed and tested mainly on Debian 9, Linux Kernel 4.9.0-11 and python 3.5 with scapy 2.4.3.

Thanks for using ft6! Your input is appreciated at contact<at>idsv6.de.