diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2013-01-14 04:08:29 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-01-17 16:55:03 +0100 |
| commit | 5c09942d54a06cefb8d12b39c9188e79ed451152 (patch) | |
| tree | 1c0aff837de90d744f27d6d060fe7bc89319f83a /testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules | |
| parent | a0ffe67fabc7e84ba5cdb533533668833231caf8 (diff) | |
| download | strongswan-5c09942d54a06cefb8d12b39c9188e79ed451152.tar.bz2 strongswan-5c09942d54a06cefb8d12b39c9188e79ed451152.tar.xz | |
converted all ipv6 iptables/ip6tables scenarios
Diffstat (limited to 'testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules')
| -rw-r--r-- | testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules new file mode 100644 index 000000000..409f2e9bb --- /dev/null +++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/ip6tables.rules @@ -0,0 +1,20 @@ +*filter + +# default policy is DROP +-P INPUT DROP +-P OUTPUT DROP +-P FORWARD DROP + +# allow ICMPv6 neighbor-solicitations +-A INPUT -p icmpv6 --icmpv6-type neighbor-solicitation -j ACCEPT +-A OUTPUT -p icmpv6 --icmpv6-type neighbor-solicitation -j ACCEPT + +# allow ICMPv6 neighbor-advertisements +-A INPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT +-A OUTPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT + +# log dropped packets +-A INPUT -j LOG --log-prefix " IN: " +-A OUTPUT -j LOG --log-prefix " OUT: " + +COMMIT |