Home / ubuntu / Questions / 63260
In Process
bumbling fool
Asked: 2011-09-28 06:26:27 +0800 CST

How can I block a range of IPv6 addresses?

  • 772

Are there any IP blocking applications or firewalls that support IPv6?

The ones I know about (pgld, moblock (sunset?) , nfblock, iplist (looks old)) are only for IPv4.

software-recommendation

1 Answers

  1. Uncomplicated Firewall (ufw) runs over IP tables and handles this very well.

    sudo ufw deny from 2001:db8::/32 to any

    Will deny all traffic from the IPv6 subnet 2001:db8::/32. You can also select ports and protocols to deny, if you need that granularity. As always, see the man page for additional options.

    ufw is in the repos, so you can install it with sudo apt-get install ufw.

    • 0