Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ip6tables]

The tag has no usage guidance.

0
votes
0answers
38 views

iptables to ip6tables

How do I turn my iptables rules to ip6tables rules? I am getting a Bad Address: iptables -A OUTPUT -p tcp -j ALLOW iptables -t nat -A PREROUTING -d 192.168.0.0/24 -i eth0 -j DNAT --to 192.168.255....
3
votes
1answer
59 views

ip6table-restore failed in Debian buster/sid

I have the below iptable rule in /etc/iptables/rule.V6 and /etc/iptables/rule.V4 -4 -A INPUT -p icmp -j ACCEPT -6 -A INPUT -p ipv6-icmp -j ACCEPT when I tried to restart the netfilter-persistent, it ...
3
votes
1answer
64 views

Are there any disadvantages or hazards to load all the firewall rules before loopback interface is initialized?

I have fairly complex iptables/ip6tables rules affecting multiple interfaces. I would like to make sure, that firewall rules are always in place. As one can create rules even for (at that moment) non-...
5
votes
2answers
1k views

What are the essential iptables rules for IPv6 to work properly?

I had a problem where I lost connectivity to a server on the IPv6 address after some time and it turned out to be caused by DHCPv6 client packets (port 546) being dropped by the default INPUT policy ...
0
votes
1answer
65 views

Why after some time I lose connectivity to my host on IPv6 when using ip6tables?

I was experimenting with ip6tables (version 1.6.0) on EC2 instances using Debian 9 AMI, I noticed that after some time I lose connectivity to the server on the IPv6 address while I can still reach the ...
0
votes
0answers
51 views

Mirror udp traffic for IPv6

I have four Virtual Machines: A, B, C, D. Machines connected by the following way through the Internal Network of Virtual Box A <-> C, B <-> C, D <-> C Machine C - central node ...
0
votes
1answer
624 views

Help with IPv6 rules and ip6tables

Right now I'm trying to figure out how to set up some IPv6 rules on a server of mine. My requirements are to disallow input echo-requests to the loopback device and local IP addresses (in this case, ...
0
votes
1answer
206 views

ipv6 security on internal network

I am just starting my foray into IPv6. First, my reference information: Comcast ISP cable-modem Linux firewall/router/gateway machine eth1 points to the Internet with a Comcast-supplied IPv6 /128 ...
0
votes
1answer
633 views

How to convert iptables rules to ip6tables rules?

I am running a cloud service on my Raspberry Pi 3 and want to access it also from outside. Unfortunately, my ISP does not allow me to forward ports (this is another story) therefore I sometimes also ...
2
votes
0answers
57 views

ip6tables rule to allow unrecognized next-header

I have a compliance test that is requiring me to respond to unrecognized next-headers per RFC 2460. I am running a debian 3.16 kernel. My current firewall implementation is dropping these frames per ...
0
votes
1answer
613 views

ip6tables will not accept -d destination but iptables will

I am trying to allow an IPv6 address connect to a certain IP on my server but not the others. The following is not working with ip6tables but it does work with just plain iptables. When I remove -d xx....
7
votes
1answer
2k views

What is the IPv6 equivalent for 127.0.0.0/8

I am trying to set up an IP6tables firewall on Linux and I basically want to start copying my IPv4 configuration. One of my rules simply accepts all traffic to the localhost subnet: iptables -A ...
10
votes
2answers
2k views

Blocking SSH Brute Force attacks on IPv6

I recently had to work with some servers that have an IPv6 connection and I was surprised to find out that fail2ban does not have IPv6 support, neither does denyhosts. Searching on google I found that ...
1
vote
0answers
128 views

equivalent of iptables rule in ip6tables

I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat -I PREROUTING ! -i br0 -p TCP ...
2
votes
1answer
546 views

How do I enable IPv6 inbound traffic to get forwarded to my machine?

It seems that IPv6 traffic on my router is being dropped. How do I configure ip6tables appropriately, so that traffic is forwarded/accepted to my machine? Here's the syslog for my IPv6 traffic: Jun ...