Tag Info

New answers tagged

1

It appears I overlooked my iptables firewall, the problem doesn't appear to be with ip6tables but actually proto 41 being blocked which is required for 6in4 to work, I added the following to my csfpre.sh file: iptables -t filter -I INPUT -p 41 -j ACCEPT iptables -t filter -I OUTPUT -p 41 -j ACCEPT Connectivity appears to be maintained now.


1

There are a few things involved here. Output from the local box uses the OUTPUT table, not PREROUTING. PREROUTING is for traffic flowing through the box. The iptables rule only matches when a packet is sent. When the client opens a connection, it has to bind to an address before a single packet is generated. When it binds, it picks the source address ...



Top 50 recent answers are included