- To: slug@xxxxxxxxxxx
- Subject: Re: [SLUG] IPv6 using ufw on Debian stable
- From: Michael Chesterton <chesty@xxxxxxxxxxxxxxxx>
- Date: Tue, 7 Jun 2011 15:16:39 +1000
On Tue, Jun 7, 2011 at 1:56 PM, miloska <miloska@xxxxxxxxx> wrote:
> You need a rule to allow packages for existing connections in -
> something like this:
>
> $IPT6 -A INPUT -i $PUB_IF -m state --state RELATED,ESTABLISHED -j ACCEPT
>
> I'm not sure if you need any special setup to tell to the kernel that
> connections should be tracked for v6 as well.
>
> I'm not familiar with ufw so I'm not sure how it's called there.
I believe the old stable 2.6.18 kernel on linode doesn't support ipv6
connection tracking. If you're running that kernel, swapping to the new
linode kernel will solve that.