|
iptables -t filter -A INPUT -p ipv6 <-'
`->-s 0/0 -d 0/0 -j ACCEPT
iptables -t filter -A OUTPUT -p ipv6 <-'
`->-s 0/0 -d 0/0 -j ACCEPT
| Consente l'ingresso e l'uscita di pacchetti riferiti a un tunnel IPv6 in IPv4 che parte dall'elaboratore contenente il firewall stesso. |
|
iptables -t filter -A INPUT -p icmp <-'
`->-s 0/0 -d 0/0 -j ACCEPT
iptables -t filter -A FORWARD -p icmp <-'
`->-s 0/0 -d 0/0 -j ACCEPT
iptables -t filter -A OUTPUT -p icmp <-'
`->-s 0/0 -d 0/0 -j ACCEPT
| Consente tutto il traffico ICMPv4. |
|
ip6tables -t filter -A INPUT -p icmpv6 <-'
`->-s 0/0 -d 0/0 -j ACCEPT
ip6tables -t filter -A FORWARD -p icmpv6 <-'
`->-s 0/0 -d 0/0 -j ACCEPT
ip6tables -t filter -A OUTPUT -p icmpv6 <-'
`->-s 0/0 -d 0/0 -j ACCEPT
| Consente tutto il traffico ICMPv6. |
|
iptables -t filter -A INPUT -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
iptables -t filter -A FORWARD -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
| Consente tutto il traffico IDENT IPv4. |
|
ip6tables -t filter -A INPUT -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
ip6tables -t filter -A FORWARD -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
ip6tables -t filter -A OUTPUT -p tcp <-'
`->-s 0/0 -d 0/0 --dport 113 -j ACCEPT
| Consente tutto il traffico IDENT IPv6. |
|
iptables -t filter -A INPUT <-'
`->-s 127.0.0.0/8 -d 0/0 -i lo -j ACCEPT
iptables -t filter -A FORWARD <-'
`->-s 127.0.0.0/8 -d 0/0 -i lo -j ACCEPT
iptables -t filter -A FORWARD <-'
`->-s 127.0.0.0/8 -d 0/0 -o lo -j ACCEPT
iptables -t filter -A OUTPUT <-'
`->-s 127.0.0.0/8 -d 0/0 -o lo -j ACCEPT
| Consente tutto il traffico interno al nodo (loopback) di tipo IPv4. |
|
ip6tables -t filter -A INPUT <-'
`->-s ::1/128 -d 0/0 -i lo -j ACCEPT
ip6tables -t filter -A FORWARD <-'
`->-s ::1/128 -d 0/0 -i lo -j ACCEPT
ip6tables -t filter -A FORWARD <-'
`->-s ::1/128 -d 0/0 -o lo -j ACCEPT
ip6tables -t filter -A OUTPUT <-'
`->-s ::1/128 -d 0/0 -o lo -j ACCEPT
| Consente tutto il traffico interno al nodo (loopback) di tipo IPv6. |