You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
16 lines
855 B
16 lines
855 B
4 months ago
|
:INPUT,FORWARD,OUTPUT
|
||
|
|
-p ip6 --ip6-src ! dead::beef/64 -j ACCEPT;-p IPv6 --ip6-src ! dead::/64 -j ACCEPT;OK
|
||
|
|
-p IPv6 --ip6-dst dead:beef::/64 -j ACCEPT;=;OK
|
||
|
|
-p IPv6 --ip6-dst f00:ba::;=;OK
|
||
|
|
-p IPv6 --ip6-tclass 0xFF;=;OK
|
||
|
|
-p IPv6 --ip6-proto tcp --ip6-dport 22;=;OK
|
||
|
|
-p IPv6 --ip6-proto tcp --ip6-dport ! 22;=;OK
|
||
|
|
-p IPv6 --ip6-proto udp --ip6-sport 1024:65535;=;OK
|
||
|
|
-p IPv6 --ip6-proto 253;=;OK
|
||
|
|
-p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type echo-request -j CONTINUE;=;OK
|
||
|
|
-p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type echo-request;=;OK
|
||
|
|
-p ip6 --ip6-protocol icmpv6 --ip6-icmp-type 1/1;-p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type communication-prohibited -j CONTINUE;OK
|
||
|
|
-p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type ! 1:10/0:255;=;OK
|
||
|
|
--ip6-proto ipv6-icmp ! --ip6-icmp-type 1:10/0:255;=;FAIL
|
||
|
|
! -p IPv6 --ip6-proto ipv6-icmp ! --ip6-icmp-type 1:10/0:255;=;FAIL
|