Home / server / Questions / 395751
Accepted
Xen
Asked: 2012-06-06 07:03:27 +0800 CST

ip6tables does not allow any traffic

  • 772

I have been struggling getting ip6tables to work. It is for a CentOS 6 server running DirectAdmin, hence the ports.
Could someone please tell me why it does not allow any traffic?

Any input on this is highly appreciated, as I am stuck at this for days now.

/sbin/ip6tables -F
/sbin/ip6tables -t mangle -F
/sbin/ip6tables -A INPUT -i lo -j ACCEPT
/sbin/ip6tables -A OUTPUT -o lo -j ACCEPT
/sbin/ip6tables -P INPUT DROP
/sbin/ip6tables -P OUTPUT ACCEPT
/sbin/ip6tables -P FORWARD DROP
/sbin/ip6tables -t mangle -P PREROUTING ACCEPT
/sbin/ip6tables -t mangle -P OUTPUT ACCEPT
/sbin/ip6tables -X
/sbin/ip6tables -t mangle -X
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,FIN FIN -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,PSH PSH -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,URG URG -j DROP
/sbin/ip6tables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -m state --state INVALID -j DROP
/sbin/ip6tables -A INPUT -i eth0 -s aaaa:bbbb:cccc:dddd:: -j DROP
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 80 -m connlimit --connlimit-above 10 -j DROP
/sbin/ip6tables -A INPUT -i eth0 -s 0:0:0:0:0:0:0:1 -j DROP
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 20 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 21 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 35000:35999 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 25 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 587 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 53 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p udp -d aaaa:bbbb:cccc:dddd:: --dport 53 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 80 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 443 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 110 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 995 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 143 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 993 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 2222 -m state --state NEW -j ACCEPT
iptables ipv6

1 Answers

  1. Best Answer

    Try allowing icmpv6. (for testing, just add "ip6tables -I INPUT -p icmpv6 -j ACCEPT").

    In IPv6 you really need alot of ICMPv6.

    Here is the rfc.

    • 4