diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-10-29 20:39:10 +0100 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-11-11 16:41:15 +0100 |
| commit | 65f74cd13da3d9cc852db1637ec61ce019ec1815 (patch) | |
| tree | bcfd024e515cb10e5c5dd004c6312d0e2ee15356 /testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules | |
| parent | 4402013f056e2cd6783617fce2ee473a44b999fe (diff) | |
| download | strongswan-65f74cd13da3d9cc852db1637ec61ce019ec1815.tar.bz2 strongswan-65f74cd13da3d9cc852db1637ec61ce019ec1815.tar.xz | |
testing: Added legacy ipv6-stroke scenarios
Diffstat (limited to 'testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules')
| -rw-r--r-- | testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules new file mode 100644 index 000000000..409f2e9bb --- /dev/null +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/ip6tables.rules @@ -0,0 +1,20 @@ +*filter + +# default policy is DROP +-P INPUT DROP +-P OUTPUT DROP +-P FORWARD DROP + +# allow ICMPv6 neighbor-solicitations +-A INPUT -p icmpv6 --icmpv6-type neighbor-solicitation -j ACCEPT +-A OUTPUT -p icmpv6 --icmpv6-type neighbor-solicitation -j ACCEPT + +# allow ICMPv6 neighbor-advertisements +-A INPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT +-A OUTPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT + +# log dropped packets +-A INPUT -j LOG --log-prefix " IN: " +-A OUTPUT -j LOG --log-prefix " OUT: " + +COMMIT |