Questions tagged [ip6tables]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
922 views

How do we access the "icmp" protocol in ip6tables?

The ip6tables command accepts icmp and icmpv6 protocols: $ sudo ip6tables -A INPUT -p icmp -j ACCEPT $ sudo ip6tables -A INPUT -p ipv6-icmp -j ACCEPT However, when I test with the ping command: $ ...
Alexis Wilke's user avatar
  • 2,807
0 votes
1 answer
234 views

Meaning of fields in ip6tables logs

I am parsing ufw logs, and running into limitations with the documentation that I am able to find for the ip6tables entries for ufw. This very nice blog post describes the iptables format well, but ...
Jennifer's user avatar
0 votes
0 answers
208 views

I6ptables rule to block docker containers from accessing interface

Context: Multiple docker containers listening on all interfaces wireguard wg0 interface with an IPv6 address eventually, NFS serving files to wg0 clients Issue: Clients behind wg0 can access these ...
MayeulC's user avatar
  • 435
5 votes
1 answer
969 views

Why do we need to have an ip6tables rule for DHCP6 to work? (by contrast, IPv4 does not require any)

Why do we need to have an ip6tables rule for DHCP6? (IPv4 does not require it by contrast) Here's minimal IPv4 rules written by me, you see no special DHCPv4 (Wikipedia) rule: IPv4: iptables --list-...
Vlastimil Burián's user avatar
0 votes
1 answer
203 views

iptables mangle

I undetstand that mangle is used to alter the headers of the packet. But I couldn't understand what exactly the following command will do? ip6tables -t mangle -A OUTPUT -s '1955:1890:1401:24FF::/64' -...
bhr's user avatar
  • 103
0 votes
2 answers
4k views

how to check whether an ipset was hooked up to iptables

My iptables output looks like this: Chain INPUT (policy ACCEPT) num target prot opt source destination 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 ...
Dan's user avatar
  • 183
0 votes
0 answers
193 views

iptables to ip6tables

How do I turn my iptables rules to ip6tables rules? I am getting a Bad Address: iptables -A OUTPUT -p tcp -j ALLOW iptables -t nat -A PREROUTING -d 192.168.0.0/24 -i eth0 -j DNAT --to 192.168.255....
Jim's user avatar
  • 1
5 votes
1 answer
6k views

ip6table-restore failed in Debian buster/sid

I have the below iptable rule in /etc/iptables/rule.V6 and /etc/iptables/rule.V4 -4 -A INPUT -p icmp -j ACCEPT -6 -A INPUT -p ipv6-icmp -j ACCEPT when I tried to restart the netfilter-persistent, it ...
Karthik's user avatar
  • 189
3 votes
1 answer
96 views

Are there any disadvantages or hazards to load all the firewall rules before loopback interface is initialized?

I have fairly complex iptables/ip6tables rules affecting multiple interfaces. I would like to make sure, that firewall rules are always in place. As one can create rules even for (at that moment) non-...
Martin's user avatar
  • 7,496
12 votes
2 answers
12k views

What are the essential iptables rules for IPv6 to work properly?

I had a problem where I lost connectivity to a server on the IPv6 address after some time and it turned out to be caused by DHCPv6 client packets (port 546) being dropped by the default INPUT policy ...
Pierre's user avatar
  • 1,083
0 votes
1 answer
395 views

Why after some time I lose connectivity to my host on IPv6 when using ip6tables?

I was experimenting with ip6tables (version 1.6.0) on EC2 instances using Debian 9 AMI, I noticed that after some time I lose connectivity to the server on the IPv6 address while I can still reach the ...
Pierre's user avatar
  • 1,083
1 vote
1 answer
3k views

Help with IPv6 rules and ip6tables

Right now I'm trying to figure out how to set up some IPv6 rules on a server of mine. My requirements are to disallow input echo-requests to the loopback device and local IP addresses (in this case, ...
stratacast1's user avatar
0 votes
1 answer
422 views

ipv6 security on internal network

I am just starting my foray into IPv6. First, my reference information: Comcast ISP cable-modem Linux firewall/router/gateway machine eth1 points to the Internet with a Comcast-supplied IPv6 /128 ...
hymie's user avatar
  • 1,710
2 votes
1 answer
2k views

How to convert iptables rules to ip6tables rules?

I am running a cloud service on my Raspberry Pi 3 and want to access it also from outside. Unfortunately, my ISP does not allow me to forward ports (this is another story) therefore I sometimes also ...
Dr3w Br1ck13's user avatar
2 votes
0 answers
112 views

ip6tables rule to allow unrecognized next-header

I have a compliance test that is requiring me to respond to unrecognized next-headers per RFC 2460. I am running a debian 3.16 kernel. My current firewall implementation is dropping these frames per ...
broncofan7's user avatar
0 votes
1 answer
2k views

ip6tables will not accept -d destination but iptables will

I am trying to allow an IPv6 address connect to a certain IP on my server but not the others. The following is not working with ip6tables but it does work with just plain iptables. When I remove -d xx....
Brént Russęll's user avatar
8 votes
1 answer
5k views

What is the IPv6 equivalent for 127.0.0.0/8

I am trying to set up an IP6tables firewall on Linux and I basically want to start copying my IPv4 configuration. One of my rules simply accepts all traffic to the localhost subnet: iptables -A ...
jippie's user avatar
  • 14k
10 votes
2 answers
3k views

Blocking SSH Brute Force attacks on IPv6

I recently had to work with some servers that have an IPv6 connection and I was surprised to find out that fail2ban does not have IPv6 support, neither does denyhosts. Searching on google I found that ...
DarthRevan13's user avatar
1 vote
0 answers
184 views

equivalent of iptables rule in ip6tables

I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat -I PREROUTING ! -i br0 -p TCP ...
MOHAMED's user avatar
  • 301
2 votes
1 answer
3k views

How do I enable IPv6 inbound traffic to get forwarded to my machine?

It seems that IPv6 traffic on my router is being dropped. How do I configure ip6tables appropriately, so that traffic is forwarded/accepted to my machine? Here's the syslog for my IPv6 traffic: Jun ...
chuacw's user avatar
  • 123