Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #2021

Re: IPv6 and ip6tables

Show all headers | View raw

>>>>> geckolimo  <geckolimo@gmail.com> writes:
>>>>> On Monday, March 11, 2013 10:13:28 PM UTC+1, Ivan Shmakov wrote:

[...]

 >> Is there really such an all-permitting rule?

 > In fact it is for loopback only (-A INPUT -i lo -j ACCEPT) but for
 > some reason -L doesn't show that.

	That's why I'd recommend to always refer to ip6tables-save(8)
	(and not # ip6tables -L) output while troubleshooting.

[...]

 > Only a few lines popped up in my log, all of them being PROTO=ICMPv6
 > TYPE=135 or TYPE=136, that is neighbor advertisements and
 > solicitations.  They were not specifically printed at the same time
 > than the NTP request.  I tried to allow them nonetheless:

[...]

 > Now my NTP server is reachable!

 > I don't know if it is related with my provider's network architecture
 > (I have a VPS server hosted by gandi.net) or if it is the common
 > behavior of NTP over IPv6.

	Actually, it's a common behavior of /IPv6,/ when an
	Ethernet-style network interface is used.  (Which apparently is
	the case.)  To note is that ICMPv6-based neighbor discovery
	assumes the role played by ARP in IPv4 Ethernets.

 > I should note I've already had ICMPv6-related issues in the past: I
 > had to turn on router-solicitation and router-advertisement to get a
 > global IPv6 address at all.

	It's possible to configure IPv6 address manually, thus these
	aren't strictly necessary.  I'd recommend against such a manual
	configuration, however, unless there's a compelling reason to
	use one.

 > What should be enabled is still a bit arcane to me.

 > Anyway, everything looks fine now!

-- 
FSF associate member #7257

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: IPv6 and ip6tables Ivan Shmakov <oneingray@gmail.com> - 2013-03-11 21:13 +0000
  Re: IPv6 and ip6tables geckolimo@gmail.com - 2013-03-12 08:51 -0700
    Re: IPv6 and ip6tables Ivan Shmakov <oneingray@gmail.com> - 2013-03-12 16:14 +0000

csiph-web