I thought to have a simple ipv6 firewall, but it turned out to be hell. Somehow I really can't connect with any ipv6 from my machine unless I set INPUT Policy to ACCEPT. Below my current ip6tables
Chain INPUT (policy DROP) target prot opt source destination ACCEPT all anywhere anywhere state RELATED,ESTABLISHED ACCEPT ipv6-icmp anywhere anywhere ACCEPT tcp anywhere anywhere tcp dpt:http ACCEPT tcp anywhere anywhere tcp dpt:https Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination
If I try to connect with any ipv6 adres it doesn't work?
telnet gdata.youtube.com 80 Trying 2a00:1450:4013:c00::76...
telnet gdata.youtube.com 443 Trying 2a00:1450:4013:c00::76...
When I set:
ip6tables -P INPUT ACCEPT
It works.. but then.. well then everything is open? what is going on? Help?