I am using ip6tables to restrict connections to server. I use ip6tables with "-m iprange --src-range %s-%s" to specify the hosts that are allowed to connect.
If I specify the range to 8000::0 - ffff::ffff, the result looks like this.
Chain ripp_0_0 (1 references)
target prot opt source destination
ACCEPT all ::/0 ::/0 source IP range 8000::-ffff::ffffIf I specify the range to 0::0 - ffff::ffff, the result looks like this.
Chain ripp_0_0 (1 references)
target prot opt source destination
ACCEPT all ::/0 ::/0 source IP range ::-ffff::ffff
My client has link-local address fe80::e91b:befe:97dc:9df5. For case 1, ip6tables work as expected, the connection is allowed. For case 2, it should also be allowed, but connection is rejected.
What is the algorithm used by ip6tables to compare addresses. Could someone please give some clue to pursue this issue.
Best regards.