search for: ip6tables

On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > On 2018-10-26 16:25, mark wrote: > I believe this should remove any ipv6 rules (rules and chains) > > ip6tables -F > ip6tables -X You might want to clear the other tables, too: for x in filter nat mangle raw security "" do ip6tables ${x:+-t $x} -F ip6tables ${x:+-t $x} -X done > You may need to set the default policies as well, as they I belive are > to deny all incoming and unrestr...

Working on a script, and to test, I need to shut down ip6tables temporarily. firewalld is running; is there any way to shut down *just* ip6tables? I tried installinf iptables-services, and did a systemctl stop ip6tables, and no joy. mark

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=451 Summary: ip6tables port range support in multiport modules is broken Product: iptables Version: unspecified Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2 Component: ip6tables...

https://bugzilla.netfilter.org/show_bug.cgi?id=1186 Bug ID: 1186 Summary: ip6tables-restore not passing useful error messages from ip6tables Product: iptables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: unknown...

http://bugzilla.netfilter.org/show_bug.cgi?id=796 Summary: ip6tables (iptables) "state" test fails to correctly determine the state of packet streams; will not jump to ACCEPT on ESTABLISHED,RELATED connections Product: iptables Version: unspecified Platform: All OS/Version: A...

Gordon Messmer wrote: > On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > >> On 2018-10-26 16:25, mark wrote: >> I believe this should remove any ipv6 rules (rules and chains) >> >> ip6tables -F ip6tables -X > > You might want to clear the other tables, too: > > > for x in filter nat mangle raw security "" do ip6tables ${x:+-t $x} -F > ip6tables ${x:+-t $x} -X done > >> You may need to set the default policies as well, as they I belive are >> t...

Hi all, I'm sorry if this is a quick dumb one, but how does one install ip6tables? Running yum install ip6tables doesn't return anything, even with the rpmforge repository enabled: root at mercury:[~]$ yum install -y ip6tables Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirrors.netdna.com * base: pubmirrors.reflected.net * extras: mir...

I have a fairly vanilla install of Centos5 on a desktop box (with a Broadcom NetXtreme BCM5752 Gigabit NIC). When booting, the boot process hangs at "Applying ip6tables firewall rules" for 30-60 seconds before proceeding, which is annoying. I have not tried to turn off ipv6 networking. I guess I could, but is this slowness to be expected? Is it waiting for some ipv6 response? Thanks, Dan

...nfiguring Shorewall on a Xen domU virtual machine. I configured only the zones, interfaces, rules, policy and shorewall.conf files. When I run "shorewall check" there aren''t no problems, but when I try to start shorewall I get this error a lot of time: iptables: Invalid argument ip6tables v1.3.6: can''t initialize ip6tables table `filter'': Bad file descriptor and the Shorewall starting process ends with /sbin/shorewall: line 656: 25228 Terminated $SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart What''s the problem? I googled for this problem and it...

https://bugzilla.netfilter.org/show_bug.cgi?id=940 Summary: ip6tables-save output invalid rule when using D/SNPT Product: iptables Version: 1.4.x Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: ip6tables AssignedTo: netfilter-buglog at lists....

http://bugzilla.netfilter.org/show_bug.cgi?id=742 Summary: ip6tables "-m iprange" ipv6 range detection Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: SuSE Linux Status: NEW Severity: critical Priority: P5 Component: ip6_tables (kernel) As...

On 2018-10-26 16:25, mark wrote: > Working on a script, and to test, I need to shut down ip6tables > temporarily. firewalld is running; is there any way to shut down *just* > ip6tables? > > I tried installinf iptables-services, and did a systemctl stop > ip6tables, > and no joy. > > mark > > _______________________________________________ > CentOS mailin...

Hi, I am having problems adding a stateful inspection rule with ip6tables on CentOS4.5. #ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT That's what I am trying to do, but #ip6tables: No chain/target/match by that name. I have been googling but unable to solve the problem. any ideas?

...ransparent firewall.(my system is Fedora Core 2,kernel 2.6.5).In this system ,the version of the iptables is 1.2.7,which does not support ipv6(I have tried it).Thus,I download a new version and test it. The iptables functions in bridge mode,but the ipv6 doesn't work well.In the bridge mode,ip6tables can¡¯t prevent the packet when I use ¡°ip6tables ¨CA FORWARD ¨Cj DROP¡±. I use the command"ls/proc/sys/net/bridge",it shows bridge-nf-call-iptables,bridge-nf-call-arptables,bridge-nf-filter-vlan-tagged.The problem is I can't find bridge-nf-call-ip6tables. I have searched a lot of...

https://bugzilla.netfilter.org/show_bug.cgi?id=1751 Bug ID: 1751 Summary: ip6tables-restore doesn't restore counters Product: iptables Version: 1.8.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: minor Priority: P5 Component: iptables-restore Assignee: netfilter-buglog at lis...

...not find 'dnsmasq' in path: No such file or directory 2012-04-20 06:00:13.405+0000: 26900: warning : ebiptablesDriverInit:4066 : Could not find 'ebtables' executable 2012-04-20 06:00:13.419+0000: 26900: error : virCommandWait:2306 : internal error Child process (/bin/sh -c IPT=/sbin/ip6tables cmd='$IPT -n -L FORWARD' eval res=\$\("${cmd} 2>&1"\) if [ $? -ne 0 ]; then ?echo "Failure to execute command '${cmd}' : '${res}'."; ?exit 1;fi ) status unexpected: exit status 1 2012-04-20 06:00:13.419+0000: 26900: error : ebiptablesDriverInit:410...

...tc class add dev eth0 parent 1: classid 1:1 htb rate 100kbit ceil 100kbit tc class add dev eth0 parent 1:1 classid 1:10 htb rate 30kbit ceil 100kbit tc class add dev eth0 parent 1:1 classid 1:11 htb rate 10kbit ceil 100kbit tc class add dev eth0 parent 1:1 classid 1:12 htb rate 60kbit ceil 100kbit ip6tables -t mangle -N queue1 ip6tables -t mangle -A queue1 -j MARK --set-mark 0x10 ip6tables -t mangle -A queue1 -j ACCEPT ip6tables -t mangle -A OUTPUT -d 2001:411:1:1:2:: -j queue1 ip6tables -t mangle -N queue2 ip6tables -t mangle -A queue2 -j MARK --set-mark 0x20 ip6tables -t mangle -A queue2 -j ACCEPT i...

http://bugzilla.netfilter.org/show_bug.cgi?id=717 Summary: ip6tables: Unknown error 18446744073709551615 Product: iptables Version: 1.3.5 Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: ip6tables AssignedTo: netfilter-buglog at lists.netfi...

...le REDIRECT, process listening on redirected port does not get a packet Product: iptables Version: 1.6.x Hardware: All OS: RedHat Linux Status: NEW Severity: critical Priority: P5 Component: ip6tables Assignee: netfilter-buglog at lists.netfilter.org Reporter: sbezverk at cisco.com I encountered a bug in 4.20.11 kernel, specifically in ip6tables redirects. It is kubernetes environment where two containers running in the same pod and sharing the same network stack. One con...

Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running mark