IPv6 configuration change?


#1

Last monday bytemark announced that they would move my virtual machine today. That’s fine, and my machine came back up just fine - or almost… IPv6 didn’t work :frowning:

After pulling some hair from my head (not easy as I cut it to 12mm on saturday), I foubnd out that I needed to change:
# IPv6 depends heavily on ICMPv6
$IP6TABLES -A INPUT -s fe80::1 -p icmpv6 -j ACCEPT
# - and apparently the replies aren’t related?
$IP6TABLES -A OUTPUT -d fe80::1 -p icmpv6 -j ACCEPT

to:
# IPv6 depends heavily on ICMPv6
$IP6TABLES -A INPUT -s fe80::0/64 -p icmpv6 -j ACCEPT
# - and apparently the replies aren’t related?
$IP6TABLES -A OUTPUT -d fe80::0/64 -p icmpv6 -j ACCEPT
in my firewall script.

Maybe my old rules were unreasonably strict, but it worked.
It would have been good to that the server my virtual machine was moved to (host33.vmh) would behave differently from the server it used to be on (magpie).

In case anybody else has similarly strict IPv6 firewall rules, the answer is here now.

.Henrik