|
@@ -507,6 +507,7 @@ iptables -F
|
507
|
507
|
iptables -X
|
508
|
508
|
|
509
|
509
|
# Drop any IPv6 traffic
|
|
510
|
+ip6tables -A INPUT -p icmp -j DROP
|
510
|
511
|
ip6tables -A INPUT -p tcp -j DROP
|
511
|
512
|
ip6tables -A INPUT -p udp -j DROP
|
512
|
513
|
|
|
@@ -615,8 +616,10 @@ iptables -A INPUT -p icmp -j DROP
|
615
|
616
|
|
616
|
617
|
# Save the settings
|
617
|
618
|
iptables-save > /etc/firewall.conf
|
|
619
|
+ip6tables-save > /etc/firewall6.conf
|
618
|
620
|
echo '#!/bin/sh' > /etc/network/if-up.d/iptables
|
619
|
621
|
echo 'iptables-restore < /etc/firewall.conf' >> /etc/network/if-up.d/iptables
|
|
622
|
+echo 'ip6tables-restore < /etc/firewall6.conf' >> /etc/network/if-up.d/iptables
|
620
|
623
|
chmod +x /etc/network/if-up.d/iptables
|
621
|
624
|
#+END_SRC
|
622
|
625
|
|
|
@@ -646,6 +649,8 @@ net.ipv4.conf.all.accept_source_route = 0
|
646
|
649
|
net.ipv6.conf.all.accept_source_route = 0
|
647
|
650
|
net.ipv4.conf.default.rp_filter=1
|
648
|
651
|
net.ipv4.conf.all.rp_filter=1
|
|
652
|
+net.ipv4.ip_forward=0
|
|
653
|
+net.ipv6.conf.all.forwarding=0
|
649
|
654
|
#+END_SRC
|
650
|
655
|
|
651
|
656
|
And append the following:
|