NetFilter
[Top] [All Lists]

ip6tables problem

To: netfilter@lists.netfilter.org
Subject: ip6tables problem
From: "Asfand Yar Qazi" <ayqazi@gmail.com>
Date: Wed, 20 Dec 2006 00:34:21 +0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=eTOONftNPChak0aEoxdqZ352PxjNcM6rHJPuPTHv0EOrKXP1Bv4zpvYRicl/NrTJuu9odVBFj53y4aTMJoivdtukF/c6XKLOJSTpkYts9ahSaI/T1MFWhXtTYyfxowgFo1QH1auqJhYTqMnDh8pE7YPuhazovn0jdnF846enws8=
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Sender: netfilter-bounces@lists.netfilter.org
Hi,

I'm using kernel 2.6.19 on Gentoo

I have an ipv6 tunnel on the device 'tunbt6', and another interface on
eth0 to the rest of my network.

I've boiled down my problem to a simple firewall setup.

When I enter the following commands:

ip6tables -N filter6
ip6tables -A filter6 -m state --state NEW -i ! tunbt6 -j ACCEPT
ip6tables -A filter6 -m state --state ESTABLISHED,RELATED -j ACCEPT
ip6tables -A filter6 -j REJECT

ip6tables -A INPUT -j filter6
ip6tables -A FORWARD -j filter6


It doesn't work!  I can't even ping6 the machine over eth0 from my
other computer connected to the same ethernet segment!

Can anybody tell me what's happening?  Thanks


<Prev in Thread] Current Thread [Next in Thread>