#ipv6

rainerhgw@diasp.org

I do not get it.
I have an INPUT chain:

❯ ip6tables -L INPUT -n
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT 0 -- ::/0 ::/0 /* Stateful firewall rule. */ ctstate RELATED,ESTABLISHED
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 2 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 128 code 0 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 137 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 134 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 133 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 135 code 0 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 136 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 4 ctstate NEW
ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 1 code 4 ctstate NEW
FWCRULE97.LOG 0 -- ::/0 ::/0 /* Catch-all rule. */

But the kernel reports over and over:

Jul 24 17:01:46 ionos-1 kernel: RULE ID 97 [REJECT] IN=ens6 OUT= MAC=[…] SRC=fe80:0000:0000:0000:0000:0000:0000:0001 DST=[…] LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Jul 24 17:01:47 ionos-1 kernel: RULE ID 97 [REJECT] IN=ens6 OUT= MAC=[…] SRC=fe80:0000:0000:0000:0000:0000:0000:0001 DST=[…] LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0

Why icmpv6 types 135 and 136 are rejected? fe80::1 is the router

#ipv6 #linux #firewall

christophs@diaspora.glasswings.com

Microsoft to Add IPv6 Support to Azure Active Directory in March

Microsoft has announced that it’s bringing Internet Protocol version 6 (IPv6) support to its Azure Active Directory services. The company plans to roll out IPv6 support to all enterprise customers in a staggered manner on March 31.

Crazy times we live in
#ipv6

https://petri.com/microsoft-ipv6-support-azure-active-directory/