Answer the question
In order to leave comments, you need to log in
Why does iptables drop packets even if it has a DROP policy on all IPv6 connections?
I have the following ip6tables rules:
[email protected]:~# cat /etc/iptables/rules.v6
*filter
:INPUT DROP [10954:4558559]
:FORWARD DROP [0:0]
:OUTPUT DROP [42631:2058968]
COMMIT
*nat
:PREROUTING ACCEPT [10945:4557911]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [365:29228]
:POSTROUTING ACCEPT [0:0]
COMMIT
ip6tables -nvL
I will see the following:[email protected]:~# ip6tables -nvL
Chain INPUT (policy DROP 138K packets, 53M bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy DROP 240K packets, 12M bytes)
pkts bytes target prot opt in out source destination
[email protected]:~# cat /etc/iptables/rules.v4
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -d 95.145.23.33/32 -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
COMMIT
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
Answer the question
In order to leave comments, you need to log in
Who said they pass?
Chain INPUT (policy DROP 138K packets, 53M bytes)Dropped 138k pacts, totaling 53M
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question