similar to: ip6tables forwarding rule

I am running multiple IPv6 subnets here in my testbed. My IPv6 'router' is a Centos box with IPv6forwarding turned on. It is also my RADVD server (over multiple VLans), and Miredo server/relay. I thought I had a simple ip6table setup that protected the box and let it forward. Well I am wrong. I got my previous DNS over IPv6 working on the DNS server, then tried to get it working

Hey all, Just a sanity check, but should the shorecap script in shorewall6-lite be sourcing /usr/share/shorewall6-lite/lib.base rather than /usr/share/shorewall-lite/lib.base like it does currently? In fact shouldn''t there be a general s/shorewall-lite/shorewall6-lite/ in shorecap in shorewall6-lite? Maybe there is more of that lurking about as well. Also, the first line of the

Hello, shorewall6 seem to have problems duplicating the main routing table. shorewall6 tries to add the fe80::/64 route of every ipv6 configured interface to routing table 1. The first route applies but the other ones not. If i try to add the routes manually to routing table 1 i have to add the first fe80::/64 route and append not add the other ones. does not work: ip -6 route add table 1

https://bugzilla.netfilter.org/show_bug.cgi?id=940 Summary: ip6tables-save output invalid rule when using D/SNPT Product: iptables Version: 1.4.x Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: ip6tables AssignedTo: netfilter-buglog at lists.netfilter.org

Hello! Recently,I¡¯m doing a security project based upon ipv6.I have built up a bridge to support a transparent firewall.(my system is Fedora Core 2,kernel 2.6.5).In this system ,the version of the iptables is 1.2.7,which does not support ipv6(I have tried it).Thus,I download a new version and test it. The iptables functions in bridge mode,but the ipv6 doesn't work well.In the

Hi, I have servers where shorewall6 won''t reject nor log: # cat /etc/shorewall6/zones fw firewall net ipv6 # cat /etc/shorewall6/interfaces net eth1 tcpflags (I also tried without "tcpflags", but no changes) # cat /etc/shorewall6/policy $FW all ACCEPT all all REJECT info # cat /etc/shorewall6/rules SECTION NEW (for testing, I removed all the rules) I am testing from

https://bugzilla.netfilter.org/show_bug.cgi?id=1186 Bug ID: 1186 Summary: ip6tables-restore not passing useful error messages from ip6tables Product: iptables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component:

Gordon Messmer wrote: > On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > >> On 2018-10-26 16:25, mark wrote: >> I believe this should remove any ipv6 rules (rules and chains) >> >> ip6tables -F ip6tables -X > > You might want to clear the other tables, too: > > > for x in filter nat mangle raw security "" do ip6tables ${x:+-t

http://bugzilla.netfilter.org/show_bug.cgi?id=796 Summary: ip6tables (iptables) "state" test fails to correctly determine the state of packet streams; will not jump to ACCEPT on ESTABLISHED,RELATED connections Product: iptables Version: unspecified Platform: All OS/Version: All

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=451 Summary: ip6tables port range support in multiport modules is broken Product: iptables Version: unspecified Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2 Component: ip6tables

On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > On 2018-10-26 16:25, mark wrote: > I believe this should remove any ipv6 rules (rules and chains) > > ip6tables -F > ip6tables -X You might want to clear the other tables, too: for x in filter nat mangle raw security "" do ip6tables ${x:+-t $x} -F ip6tables ${x:+-t $x} -X done > You may need to

I have a fairly vanilla install of Centos5 on a desktop box (with a Broadcom NetXtreme BCM5752 Gigabit NIC). When booting, the boot process hangs at "Applying ip6tables firewall rules" for 30-60 seconds before proceeding, which is annoying. I have not tried to turn off ipv6 networking. I guess I could, but is this slowness to be expected? Is it waiting for some ipv6 response?

On 2018-10-26 16:25, mark wrote: > Working on a script, and to test, I need to shut down ip6tables > temporarily. firewalld is running; is there any way to shut down *just* > ip6tables? > > I tried installinf iptables-services, and did a systemctl stop > ip6tables, > and no joy. > > mark > > _______________________________________________ > CentOS

https://bugzilla.netfilter.org/show_bug.cgi?id=1751 Bug ID: 1751 Summary: ip6tables-restore doesn't restore counters Product: iptables Version: 1.8.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: minor Priority: P5 Component: iptables-restore Assignee: netfilter-buglog

Hi all, I'm sorry if this is a quick dumb one, but how does one install ip6tables? Running yum install ip6tables doesn't return anything, even with the rpmforge repository enabled: root at mercury:[~]$ yum install -y ip6tables Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirrors.netdna.com * base: pubmirrors.reflected.net * extras: mirror.vcu.edu *

http://bugzilla.netfilter.org/show_bug.cgi?id=717 Summary: ip6tables: Unknown error 18446744073709551615 Product: iptables Version: 1.3.5 Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: ip6tables AssignedTo: netfilter-buglog at lists.netfilter.org

I wonder if anyone is running IPv6 under Centos-5.2? Particularly with shorewall? I see that shorewall6 is specifically designed for updating shorewall to IPv6, as described in <http://www.shorewall.net/IPv6Support.html>. Unfortunately, this explicity requires kernel 2.6.25 or later, and iptables 1.4.0 or later, both of which are later than any versions I've seen on a Centos

http://bugzilla.netfilter.org/show_bug.cgi?id=576 Summary: ip6tables maks auto configuration packages as INVALID Product: iptables Version: unspecified Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: blocker Priority: P1 Component: ip6tables AssignedTo: laforge at netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=742 Summary: ip6tables "-m iprange" ipv6 range detection Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: SuSE Linux Status: NEW Severity: critical Priority: P5 Component: ip6_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=103 Summary: ip6tables -L does not separate address and mask if mask is odd Product: iptables userspace Version: 1.2.8 Platform: All OS/Version: All Status: NEW Severity: trivial Priority: P2 Component: ip6tables