Questions tagged [ip6tables]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
21 views

How do we access the "icmp" protocol in ip6tables?

The ip6tables command accepts icmp and icmpv6 protocols: $ sudo ip6tables -A INPUT -p icmp -j ACCEPT $ sudo ip6tables -A INPUT -p ipv6-icmp -j ACCEPT However, when I test with the ping command: $ ...
  • 2,419
0 votes
1 answer
33 views

Meaning of fields in ip6tables logs

I am parsing ufw logs, and running into limitations with the documentation that I am able to find for the ip6tables entries for ufw. This very nice blog post describes the iptables format well, but ...
0 votes
0 answers
111 views

I6ptables rule to block docker containers from accessing interface

Context: Multiple docker containers listening on all interfaces wireguard wg0 interface with an IPv6 address eventually, NFS serving files to wg0 clients Issue: Clients behind wg0 can access these ...
  • 285
3 votes
1 answer
522 views

Why do we need to have an ip6tables rule for DHCP6 to work? (by contrast, IPv4 does not require any)

Why do we need to have an ip6tables rule for DHCP6? (IPv4 does not require it by contrast) Here's minimal IPv4 rules written by me, you see no special DHCPv4 (Wikipedia) rule: IPv4: iptables --list-...
0 votes
1 answer
81 views

iptables mangle

I undetstand that mangle is used to alter the headers of the packet. But I couldn't understand what exactly the following command will do? ip6tables -t mangle -A OUTPUT -s '1955:1890:1401:24FF::/64' -...
  • 93
0 votes
2 answers
2k views

how to check whether an ipset was hooked up to iptables

My iptables output looks like this: Chain INPUT (policy ACCEPT) num target prot opt source destination 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 ...
  • 173
0 votes
0 answers
161 views

iptables to ip6tables

How do I turn my iptables rules to ip6tables rules? I am getting a Bad Address: iptables -A OUTPUT -p tcp -j ALLOW iptables -t nat -A PREROUTING -d 192.168.0.0/24 -i eth0 -j DNAT --to 192.168.255....
  • 1
4 votes
1 answer
5k views

ip6table-restore failed in Debian buster/sid

I have the below iptable rule in /etc/iptables/rule.V6 and /etc/iptables/rule.V4 -4 -A INPUT -p icmp -j ACCEPT -6 -A INPUT -p ipv6-icmp -j ACCEPT when I tried to restart the netfilter-persistent, it ...
  • 169
3 votes
1 answer
89 views

Are there any disadvantages or hazards to load all the firewall rules before loopback interface is initialized?

I have fairly complex iptables/ip6tables rules affecting multiple interfaces. I would like to make sure, that firewall rules are always in place. As one can create rules even for (at that moment) non-...
  • 6,708
10 votes
2 answers
9k views

What are the essential iptables rules for IPv6 to work properly?

I had a problem where I lost connectivity to a server on the IPv6 address after some time and it turned out to be caused by DHCPv6 client packets (port 546) being dropped by the default INPUT policy ...
  • 1,043
0 votes
1 answer
303 views

Why after some time I lose connectivity to my host on IPv6 when using ip6tables?

I was experimenting with ip6tables (version 1.6.0) on EC2 instances using Debian 9 AMI, I noticed that after some time I lose connectivity to the server on the IPv6 address while I can still reach the ...
  • 1,043
1 vote
1 answer
2k views

Help with IPv6 rules and ip6tables

Right now I'm trying to figure out how to set up some IPv6 rules on a server of mine. My requirements are to disallow input echo-requests to the loopback device and local IP addresses (in this case, ...
0 votes
1 answer
373 views

ipv6 security on internal network

I am just starting my foray into IPv6. First, my reference information: Comcast ISP cable-modem Linux firewall/router/gateway machine eth1 points to the Internet with a Comcast-supplied IPv6 /128 ...
  • 1,672
2 votes
1 answer
2k views

How to convert iptables rules to ip6tables rules?

I am running a cloud service on my Raspberry Pi 3 and want to access it also from outside. Unfortunately, my ISP does not allow me to forward ports (this is another story) therefore I sometimes also ...
2 votes
0 answers
76 views

ip6tables rule to allow unrecognized next-header

I have a compliance test that is requiring me to respond to unrecognized next-headers per RFC 2460. I am running a debian 3.16 kernel. My current firewall implementation is dropping these frames per ...
0 votes
1 answer
1k views

ip6tables will not accept -d destination but iptables will

I am trying to allow an IPv6 address connect to a certain IP on my server but not the others. The following is not working with ip6tables but it does work with just plain iptables. When I remove -d xx....
8 votes
1 answer
5k views

What is the IPv6 equivalent for 127.0.0.0/8

I am trying to set up an IP6tables firewall on Linux and I basically want to start copying my IPv4 configuration. One of my rules simply accepts all traffic to the localhost subnet: iptables -A ...
  • 13.3k
9 votes
2 answers
3k views

Blocking SSH Brute Force attacks on IPv6

I recently had to work with some servers that have an IPv6 connection and I was surprised to find out that fail2ban does not have IPv6 support, neither does denyhosts. Searching on google I found that ...
1 vote
0 answers
161 views

equivalent of iptables rule in ip6tables

I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat -I PREROUTING ! -i br0 -p TCP ...
  • 301
2 votes
1 answer
1k views

How do I enable IPv6 inbound traffic to get forwarded to my machine?

It seems that IPv6 traffic on my router is being dropped. How do I configure ip6tables appropriately, so that traffic is forwarded/accepted to my machine? Here's the syslog for my IPv6 traffic: Jun ...
  • 123