Ubuntu provides some good information on how to enable UFW and on how to enable IPv6 with miredo:
But what is missing is information on how to properly configure UFW to let Miredo work, as as soon as I enable UFW IPv6 stops working:
$ ufw disable
$ ping6 ipv6.google.com
PING ipv6.google.com(2a00:1450:8004::93) 56 data bytes
64 bytes from 2a00:1450:8004::93: icmp_seq=1 ttl=56 time=1886 ms
$ ufw enable
$ ping6 ipv6.google.com
PING ipv6.google.com(2a00:1450:8004::6a) 56 data bytes
ping: sendmsg: Operation not permitted
So how do I properly configure both Miredo and UFW together that basic IPv6 is working, but with all other incoming traffic being blocked?
IPv6 is disabled by default in current released versions of ufw. To enable, edit
/etc/default/ufw
to have:You will also need to reload the ruleset. On newer releases of Ubuntu:
On older releases of Ubuntu, you can restart with:
IPv6 support in UFW has to be explicitly enabled by editing
/etc/default/ufw
and changingIPv6=no
toIPv6=yes
.