Questions tagged [ip6tables]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

ip6tables rule is not taken account

I added the following ip6tables rules, the rules allow to block all DNS IPv6 requests containing the sting youtube.com ip6tables -A FORWARD -p udp --dport 53 -m string --domain youtube.com --algo bm -...
0
votes
1answer
51 views

ip6tables issue on CentOS 6.10 OpenVZ server: cannot unload modules

Hello friends at Serverfault! I'm having a weird issue with my CentOS 6.10 OpenVZ server (using Virtualizor), as I have enable IPv6 support. This server has basically exactly the same setup as three ...
0
votes
1answer
40 views

How to block incoming ESP traffic with ip6tables

I would like to test my firewall configuration when IPsec traffic is received in my host and I also would like to know how to handle it (drop it at first). For testing reasons, I have deployed two ...
2
votes
1answer
36 views

Can I filter based on a ICMPv6 subtype?

I'm trying to filter out specific ICMPv6 packets and I tried looking at all the possible types options by using the following command: ip6tables -p icmpv6 -h This yields the following types (note ...
-1
votes
2answers
386 views

ip6tables is not masquerading source address

The following are my ip6tables rules: # ip6tables -t nat -L -v Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination ...
1
vote
0answers
47 views

Mirror udp traffic for IPv6

I have four Virtual Machines: A, B, C, D. Machines connected by the following way through the Internal Network of Virtual Box A <-> C, B <-> C, D <-> C Machine C - central node ...
1
vote
1answer
415 views

Linux ip6_tables xt_percpu_counter_free (err 0)

Today I wanted install a new server instance with ansible and our existent playbooks. The base system is a Debian 9.4. The firewall role failed, but I do not think that it is an ansible or role ...
0
votes
1answer
552 views

OpenVPN ipv6 working fine until i load ip6table rules

I'm running OpenVPN 2.4.0 on Ubuntu 17.04, This setup is working fine and already described here https://serverfault.com/q/887243. The issue comes when i try to load ip6tables rules through the ...
0
votes
1answer
82 views

ICMPv6 restrictive firewall: losing connectivity over time

The problem: Losing IPv6 connectivity to a remote IP after certain time period without establishing a connection to the remote IP. My setup: I'm running a server with ip6tables firewall that ...
0
votes
1answer
39 views

Firewall rule with default policies is not working

I have made a firewall rule bash script as: #!/bin/bash iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP ip6tables -P INPUT DROP ip6tables -P FORWARD ...
2
votes
1answer
920 views

What wrong with snat in nftables?

I have two virtual machines (server, client) with wireguard vpn. When i try ping any IPv6 resource from client packets doesn't return to client. Tcpdump show me ICMP Reply packets in enp0s3 interface ...
0
votes
1answer
145 views

ip6tables rule to allow unrecognized next-header

I have a compliance test that is requiring my node to respond to unrecognized next-headers per RFC 2460. I am running a debian 3.16 kernel. My current firewall implementation is dropping these frames ...
0
votes
0answers
354 views

Ip6tables centos 7 rule not working

The following rules were working for ipv4 addresses in iptables but using the same rules in ip6tables is not working. Currently all ipv6 addresses are being blocked. This rule set should allow https ...
-1
votes
1answer
885 views

Disable ICMPv6 Destination Unreachable replies

iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP The above command works for IPv4, what should be the command for IPv6 to drop the ICMPv6 destination-unreachable packets. I have ...
1
vote
1answer
889 views

ip6tables blocking outgoing+incoming connections

i just changed to a server with ipv6 and therefore i changed my firewall script. Changing my iptables-script to ip6tables does not seem to work though. This is the ipv6 part which neither allows ...
-1
votes
1answer
365 views

Best way to forward whole ipv6 /64 subnet range to single address (on Linux, obv)? [duplicate]

I want to forward incoming connections to any address within an assigned ipv6 /64 subnet on a VPS. Obviously I can't add a billion individual address to the interface, but perhaps I could use a bogus ...
1
vote
1answer
2k views

Rule to allow port 80 using IPV6

My server: 64 bit Ubuntu 12.04.4 LTS. Provider: Linode.com. No other firewall is present. I've these rules: *filter # Allow localhost traffic. This rule is for all protocols. -A INPUT -s ::1 -d ::...
0
votes
1answer
205 views

ip6tables forward chain filters all ports

Trying the following on a centos 6 node (running openvz kernel) ip6tables -F ip6tables -X ip6tables -P FORWARD DROP ip6tables -A FORWARD -p tcp -m multiport --dports 21,22,80,443 -j ACCEPT ip6tables -...
0
votes
1answer
632 views

ip6tables port dropping and defaults

On CentOS 6, ip6tables is literally giving a nightmare on this machine. Having ip6tables -P INPUT ACCEPT ip6tables -P OUTPUT ACCEPT ip6tables -P FORWARD ACCEPT with ip6tables -A INPUT -p tcp -m ...
-1
votes
1answer
679 views

ruleset iptables- user defined chains [closed]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
0
votes
0answers
43 views

Using ip6tables with range

I'm trying to ban an ip range with ip6tables. I'm adding this line to /etc/sysconfig/ip6tables -A INPUT -s ::ffff:58.26.318.213 -j DROP But I want to ban everything that starts with 58.26 so that ...
0
votes
1answer
174 views

IP6Tables: How to enable external access to MySQL?

How to enable external access to MySQL with rules on ip6tables? I have tried to the rules below, where after inserted I get access, but when server restart the access remains blocked. :INPUT DROP [2:...
-2
votes
1answer
41 views

port forward in INPUT level

I want to change the destination port of the ipv6 packet in the INPUT level. So I tried to use ip6tables with nat in the INPUT level but seems this command does not work # ip6tables -t nat -I INPUT ...
0
votes
2answers
3k views

Differences between iptables and ip6tables processing of packets

I've reviewed a variety of netfilter, iptables, and ip6tables resources. I've searched Google, including StackExchange websites for information, and, I can't find easy or clear links to information ...