Questions tagged [ip6tables]
The ip6tables tag has no summary.
21 questions
0 votes
1 answer
209 views
Linux Mint 22 Cinnamon desktop not showing after installing iptables-persistent package (policy DROP)
I just installed Linux Mint 22 Cinnamon for the second time in one week, really frustrating. Reason being that after I have set up almost everything same as in Linux Mint 21.3 Cinnamon in a couple ...
2 votes
1 answer
3k views
How do we access the "icmp" protocol in ip6tables?
The ip6tables command accepts icmp and icmpv6 protocols: $ sudo ip6tables -A INPUT -p icmp -j ACCEPT $ sudo ip6tables -A INPUT -p ipv6-icmp -j ACCEPT However, when I test with the ping6 command: $ ...
0 votes
1 answer
438 views
Meaning of fields in ip6tables logs
I am parsing ufw logs, and running into limitations with the documentation that I am able to find for the ip6tables entries for ufw. This very nice blog post describes the iptables format well, but ...
0 votes
0 answers
291 views
I6ptables rule to block docker containers from accessing interface
Context: Multiple docker containers listening on all interfaces wireguard wg0 interface with an IPv6 address eventually, NFS serving files to wg0 clients Issue: Clients behind wg0 can access these ...
6 votes
1 answer
1k views
Why do we need to have an ip6tables rule for DHCP6 to work? (by contrast, IPv4 does not require any)
Why do we need to have an ip6tables rule for DHCP6? (IPv4 does not require it by contrast) Here's minimal IPv4 rules written by me, you see no special DHCPv4 (Wikipedia) rule: IPv4: iptables --list-...
0 votes
1 answer
302 views
iptables mangle
I undetstand that mangle is used to alter the headers of the packet. But I couldn't understand what exactly the following command will do? ip6tables -t mangle -A OUTPUT -s '1955:1890:1401:24FF::/64' -...
0 votes
2 answers
5k views
how to check whether an ipset was hooked up to iptables
My iptables output looks like this: Chain INPUT (policy ACCEPT) num target prot opt source destination 1 DROP all -- 0.0.0.0/0 0.0.0.0/0 ...
0 votes
0 answers
211 views
iptables to ip6tables
How do I turn my iptables rules to ip6tables rules? I am getting a Bad Address: iptables -A OUTPUT -p tcp -j ALLOW iptables -t nat -A PREROUTING -d 192.168.0.0/24 -i eth0 -j DNAT --to 192.168.255....
5 votes
1 answer
7k views
ip6table-restore failed in Debian buster/sid
I have the below iptable rule in /etc/iptables/rule.V6 and /etc/iptables/rule.V4 -4 -A INPUT -p icmp -j ACCEPT -6 -A INPUT -p ipv6-icmp -j ACCEPT when I tried to restart the netfilter-persistent, it ...
3 votes
1 answer
101 views
Are there any disadvantages or hazards to load all the firewall rules before loopback interface is initialized?
I have fairly complex iptables/ip6tables rules affecting multiple interfaces. I would like to make sure, that firewall rules are always in place. As one can create rules even for (at that moment) non-...
13 votes
2 answers
15k views
What are the essential iptables rules for IPv6 to work properly?
I had a problem where I lost connectivity to a server on the IPv6 address after some time and it turned out to be caused by DHCPv6 client packets (port 546) being dropped by the default INPUT policy ...
0 votes
1 answer
504 views
Why after some time I lose connectivity to my host on IPv6 when using ip6tables?
I was experimenting with ip6tables (version 1.6.0) on EC2 instances using Debian 9 AMI, I noticed that after some time I lose connectivity to the server on the IPv6 address while I can still reach the ...
1 vote
1 answer
3k views
Help with IPv6 rules and ip6tables
Right now I'm trying to figure out how to set up some IPv6 rules on a server of mine. My requirements are to disallow input echo-requests to the loopback device and local IP addresses (in this case, ...
0 votes
1 answer
455 views
ipv6 security on internal network
I am just starting my foray into IPv6. First, my reference information: Comcast ISP cable-modem Linux firewall/router/gateway machine eth1 points to the Internet with a Comcast-supplied IPv6 /128 ...
3 votes
1 answer
2k views
How to convert iptables rules to ip6tables rules?
I am running a cloud service on my Raspberry Pi 3 and want to access it also from outside. Unfortunately, my ISP does not allow me to forward ports (this is another story) therefore I sometimes also ...