Questions tagged [ip6tables]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
38 views

Why do we need to have an ip6tables rule for DHCP6 to work? (by contrast, IPv4 does not require any)

Why do we need to have an ip6tables rule for DHCP6? (IPv4 does not require it by contrast) Here's minimal IPv4 rules written by me, you see no special DHCPv4 (Wikipedia) rule: IPv4: iptables --list-...
0
votes
1answer
25 views

iptables mangle

I undetstand that mangle is used to alter the headers of the packet. But I couldn't understand what exactly the following command will do? ip6tables -t mangle -A OUTPUT -s '1955:1890:1401:24FF::/64' -...
0
votes
2answers
570 views

how to check whether an ipset was hooked up to iptables

My iptables output looks like this: Chain INPUT (policy ACCEPT) num target prot opt source destination 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 ...
0
votes
0answers
91 views

iptables to ip6tables

How do I turn my iptables rules to ip6tables rules? I am getting a Bad Address: iptables -A OUTPUT -p tcp -j ALLOW iptables -t nat -A PREROUTING -d 192.168.0.0/24 -i eth0 -j DNAT --to 192.168.255....
4
votes
1answer
2k views

ip6table-restore failed in Debian buster/sid

I have the below iptable rule in /etc/iptables/rule.V6 and /etc/iptables/rule.V4 -4 -A INPUT -p icmp -j ACCEPT -6 -A INPUT -p ipv6-icmp -j ACCEPT when I tried to restart the netfilter-persistent, it ...
3
votes
1answer
76 views

Are there any disadvantages or hazards to load all the firewall rules before loopback interface is initialized?

I have fairly complex iptables/ip6tables rules affecting multiple interfaces. I would like to make sure, that firewall rules are always in place. As one can create rules even for (at that moment) non-...
7
votes
2answers
5k views

What are the essential iptables rules for IPv6 to work properly?

I had a problem where I lost connectivity to a server on the IPv6 address after some time and it turned out to be caused by DHCPv6 client packets (port 546) being dropped by the default INPUT policy ...
0
votes
1answer
159 views

Why after some time I lose connectivity to my host on IPv6 when using ip6tables?

I was experimenting with ip6tables (version 1.6.0) on EC2 instances using Debian 9 AMI, I noticed that after some time I lose connectivity to the server on the IPv6 address while I can still reach the ...
0
votes
1answer
1k views

Help with IPv6 rules and ip6tables

Right now I'm trying to figure out how to set up some IPv6 rules on a server of mine. My requirements are to disallow input echo-requests to the loopback device and local IP addresses (in this case, ...
0
votes
1answer
333 views

ipv6 security on internal network

I am just starting my foray into IPv6. First, my reference information: Comcast ISP cable-modem Linux firewall/router/gateway machine eth1 points to the Internet with a Comcast-supplied IPv6 /128 ...
1
vote
1answer
920 views

How to convert iptables rules to ip6tables rules?

I am running a cloud service on my Raspberry Pi 3 and want to access it also from outside. Unfortunately, my ISP does not allow me to forward ports (this is another story) therefore I sometimes also ...
2
votes
0answers
67 views

ip6tables rule to allow unrecognized next-header

I have a compliance test that is requiring me to respond to unrecognized next-headers per RFC 2460. I am running a debian 3.16 kernel. My current firewall implementation is dropping these frames per ...
0
votes
1answer
888 views

ip6tables will not accept -d destination but iptables will

I am trying to allow an IPv6 address connect to a certain IP on my server but not the others. The following is not working with ip6tables but it does work with just plain iptables. When I remove -d xx....
8
votes
1answer
4k views

What is the IPv6 equivalent for 127.0.0.0/8

I am trying to set up an IP6tables firewall on Linux and I basically want to start copying my IPv4 configuration. One of my rules simply accepts all traffic to the localhost subnet: iptables -A ...
10
votes
2answers
2k views

Blocking SSH Brute Force attacks on IPv6

I recently had to work with some servers that have an IPv6 connection and I was surprised to find out that fail2ban does not have IPv6 support, neither does denyhosts. Searching on google I found that ...
1
vote
0answers
147 views

equivalent of iptables rule in ip6tables

I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat -I PREROUTING ! -i br0 -p TCP ...
2
votes
1answer
965 views

How do I enable IPv6 inbound traffic to get forwarded to my machine?

It seems that IPv6 traffic on my router is being dropped. How do I configure ip6tables appropriately, so that traffic is forwarded/accepted to my machine? Here's the syslog for my IPv6 traffic: Jun ...