# @sysconfdir@/firewall.d/rules6
#
#  Host Specific IPv6 Firewall Rules for Linux Server
#
#  THIS FILE IS INTENDED TO CONTAIN FIREWALL RULES SPECIFIC TO AN INDIVIDUAL
#  SERVER.
#
#  USE ONE OF THE FOLLOWING FILES FOR GLOBAL RULES:
#     @sysconfdir@/firewall.d/global.d/ipsets
#     @sysconfdir@/firewall.d/global.d/rules
#     @sysconfdir@/firewall.d/global.d/rules4
#     @sysconfdir@/firewall.d/global.d/rules6
#
#  USE ONE OF THE FOLLOWING FILES FOR SERVER CLUSTER RULES:
#     @sysconfdir@/firewall.d/cluster.d/ipsets
#     @sysconfdir@/firewall.d/cluster.d/rules
#     @sysconfdir@/firewall.d/cluster.d/rules4
#     @sysconfdir@/firewall.d/cluster.d/rules6
#
#  USE ONE OF THE FOLLOWING FILES FOR APPLICATION RULES:
#     @sysconfdir@/firewall.d/apps.d/<app name>/ipsets
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules4
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules6
#

#########################
#                       #
#  FILTER Table (IPv6)  #
#                       #
#########################
*filter

# allow all ICMPv6 traffic
-I INPUT   -p icmpv6   -j ACCEPT

## accept SSH connections from link-local and RFC4193 addresses
#-A INPUT -p tcp   -s fc00::/7    --dport ssh   -j ACCEPT
#-A INPUT -p tcp   -s fe80::/10   --dport ssh   -j ACCEPT

## accept DNS queries from link-local and RFC4193 addresses
#-A INPUT -p tcp   -s fc00::/7        --dport domain   -j ACCEPT
#-A INPUT -p udp   -s fc00::/7        --dport domain   -j ACCEPT
#-A INPUT -p tcp   -s fe80::/10       --dport domain   -j ACCEPT
#-A INPUT -p udp   -s fe80::/10       --dport domain   -j ACCEPT

COMMIT


######################
#                    #
#  RAW Table (IPv6)  #
#                    #
######################
*raw

COMMIT

# end of rules