How to use Netfilter properly with IPv6?

Login or Register to Ask a Question and Join Our Community

How to use Netfilter properly with IPv6?

Tags

Login to Discuss or Reply to this Discussion in Our Community

Special Forums Cybersecurity How to use Netfilter properly with IPv6?

11-22-2016

Registered User

2, 0

Join Date: Aug 2016

Last Activity: 22 November 2016, 5:39 AM EST

Posts: 2

Thanks Given: 2

Thanked 0 Times in 0 Posts

How to use Netfilter properly with IPv6?

Hello,

on a PC with Debian 8 I try to use a Bash script with Netfilter rules so that only traffic goes in and out that is wanted. For that I set all 3 default policies to "drop". The machine uses DHCP to get its IP, gateway and DNS. And I never checked so I was quite surprised that my router/modem assings an IPv6 and not only an IPv4. I wonder if I need additional rules for IPv6. Could somebody explain that problem to me?

Greetings,
SInt

SInt

View Public Profile for SInt

Find all posts by SInt

02-10-2017

Registered User

122, 4

Join Date: Jun 2014

Last Activity: 10 August 2017, 2:46 PM EDT

Location: Brazil

Posts: 122

Thanks Given: 38

Thanked 4 Times in 4 Posts

Debian 8.x works a bit more sophisticated on that issue, but check on the GUI your network configurations. Probably there should be an icon where you can disable the IPv6 support and the whole thing. Traffic will not even be started on that. If it works like this, fine, otherwise, try to find the interface in /etc and may comment it out. Hope that helps. Cheers.
Once you have the opportunity to look at the network interfaces and their connections, you can disable or enact them, as well you can set the DNS and the Gateway. The complication of Debian is, that it offers two of that tools.

Last edited by 1in10; 02-10-2017 at 08:51 AM.. Reason: explanation

1in10

View Public Profile for 1in10

Find all posts by 1in10

Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Assigning ipv6 to bonding interface - getting old as well as changed ipv6 in ifconfig output

Hi, I have created a bonding bond1 interface with 6 Eth , mode=4. Recently i have changed my old ipv6 to new one and tried to restart as well as reload network service. Post which i can see old as well as changed ipv6 in ifconfig command output. Below are few files and command output for your...

2. Cybersecurity

Experience with libvirt netfilter API

Hi all, I would like to get some ideas and opinions on matter of libvirt netfilter application in KVM environment. I am looking for some easy way to control it with an API and possible experience with that and its performance in real life application. Thanks for all ideas

3. Linux

C, LKM, netfilter, PF_PACKET and ARP.

Hello, Everyone knows that with PF_PACKET sockets one can "sniff" a determinated frame from the network device, but just that, see the frame without altering its action on the receiving host. What i want is to "intercept" the incoming frame and pass it through some rules, and if it doesn't pass...

4. Linux

netfilter / iptables

HI, Is the Netfilter and IPtables same? Thanks & Regards Arun

5. Cybersecurity

Netfilter conntracking for P2P protocols (edonkey, bittorent...)

Hi everyone, I would like to allow multi users to access P2P networks, so I wonder if there's a way to tracking these kind of protocols with netfilter, and also compatibility with nat, like the module conntrack_ftp seems to do with the FTP protocol. Thanks guys.

6. IP Networking

netfilter connection tracking

hi, i'm using tcpreplay to send a traffic trace to my wireless interface (the trace is been captured by the same interface). It seems as netfilter can't trace connections. Is it possible?

7. Programming

extending netfilter...plz help

Hello friends i'm trying to extend iptables to include a target by which we can change the packet type field of a packet. For this i created a kernel module and a userspace extension. Now i face the problem that when i try to invoke iptable with the target i created i get an error message saying...

8. Programming

Problem in registering new netfilter target module

Friends I'm facing a big problem trying to extend the netfilter. Somone please help me with your quick reply (any hint) as I've to meet a deadline. My problem is that I've written a new netfilter target module and its corresponding userspace program for iptables to change the packet type of a...

9. Programming

Help in extending netfilter

Hi everybody, I have to write a module for matching in netfilter , extending the netfilter but I'm facing some problems can somebody guide me in that. I know that I need to write matching module working in kernel space and a program in userspace. I went through the HOWTO on netfilter-hacking but...

Login or Register to Ask a Question