Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] IPv6 using ufw on Debian stable


On Tue, Jun 7, 2011 at 1:56 PM, miloska <miloska@xxxxxxxxx> wrote:

> You need a rule to allow packages for existing connections in -
> something like this:
>
> $IPT6 -A INPUT -i $PUB_IF -m state --state RELATED,ESTABLISHED -j ACCEPT
>
> I'm not sure if you need any special setup to tell to the kernel that
> connections should be tracked for v6 as well.
>
> I'm not familiar with ufw so I'm not sure how it's called there.


 I believe the old stable 2.6.18 kernel on linode doesn't support ipv6
connection tracking. If you're running that kernel, swapping to the new
linode kernel will solve that.