2 Likes
1 Shares
"IPV4 addresses are like diamonds, IPV6 addresses are like sand...", this is a very neat IPv6 writeup for trying to get your brain wrapped around IPv6 from a practicality perspective. (H/T @The Late Night Linux Family ) #networking #IPv6 #IT gist.github.com/timothyham/dd0…
I do not get it.
I have an INPUT chain:
❯ ip6tables -L INPUT -n
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT 0 -- ::/0 ::/0 /* Stateful firewall rule. */ ctstate RELATED,ESTABLISHED
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 2 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 128 code 0 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 137 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 134 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 133 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 135 code 0 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 136 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 4 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 1 code 4 ctstate NEW
FWCRULE97.LOG 0 -- ::/0 ::/0 /* Catch-all rule. */
But the kernel reports over and over:
Jul 24 17:01:46 ionos-1 kernel: RULE ID 97 [REJECT] IN=ens6 OUT= MAC=[…] SRC=fe80:0000:0000:0000:0000:0000:0000:0001 DST=[…] LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Jul 24 17:01:47 ionos-1 kernel: RULE ID 97 [REJECT] IN=ens6 OUT= MAC=[…] SRC=fe80:0000:0000:0000:0000:0000:0000:0001 DST=[…] LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0
Why icmpv6 types 135 and 136 are rejected? fe80::1 is the router
I recently switched from #ipfire to #pfsense, partially for the latter’s support for #IPv6. I’ve been using IPv6 for years, but there’s still more to learn. Here’s a nice primer:
https://gist.github.com/timothyham/dd003dbad5614b425a8325ec820fd785
When you need to set an #IPv6 next time have a look in this list.
Microsoft has announced that it’s bringing Internet Protocol version 6 (IPv6) support to its Azure Active Directory services. The company plans to roll out IPv6 support to all enterprise customers in a staggered manner on March 31.
Crazy times we live in
#ipv6
https://petri.com/microsoft-ipv6-support-azure-active-directory/