Displaying 1 result from an estimated 1 matches for "drop_broadcast_and_mcast".
2017 Sep 30
0
[Bug 1186] New: ip6tables-restore not passing useful error messages from ip6tables
...g from official repos).
When generating an IPv6 firewall with an option not supported by IPv6
ip6tables-restore gives this error: (line 76 is the last line in the file with
the COMMIT statement):
ip6tables-restore: line 76 failed
After debugging the rules manually I found the issue:
ip6tables -A DROP_BROADCAST_AND_MCAST --match state --state NEW --match
addrtype --dst-type BROADCAST --jump DROP
ip6tables: Invalid argument. Run `dmesg' for more information.
Running dmesg gives me:
[636716.526815] xt_addrtype: ipv6 does not support BROADCAST matching
If ip6tables-restore could pass the error from ip6tables t...