FERM IPV6 default policy #131

New issue

Open

opened 2022-06-30 15:58:39 +00:00 by rafael · 1 comment

rafael commented

2022-06-30 15:58:39 +00:00

(Migrated from gitlab.privaz.io)

FERM is not dealing with IPV6 at all
default IPV-6 policies are accept.

default policy should be drop

FERM is not dealing with IPV6 at all default IPV-6 policies are accept. default policy should be drop

rafael commented

2022-06-30 16:07:17 +00:00

(Migrated from gitlab.privaz.io)

this can easily achived with

# IPv6 rules
domain ip6 table filter {
    chain INPUT {
        policy DROP;
    }
    chain OUTPUT {
        policy DROP;
    }
    chain FORWARD {
        policy DROP;
    }
}

file as ferm/conf.d/noipv6.conf

this can easily achived with ``` # IPv6 rules domain ip6 table filter { chain INPUT { policy DROP; } chain OUTPUT { policy DROP; } chain FORWARD { policy DROP; } } ``` file as ferm/conf.d/noipv6.conf