diff options
author | Maciej Żenczykowski <maze@google.com> | 2011-04-14 02:22:14 -0700 |
---|---|---|
committer | Maciej Żenczykowski <maze@google.com> | 2011-04-19 18:20:49 -0700 |
commit | 57664121bce6d3ae05a186c7627c919fb0799649 (patch) | |
tree | c36a4966a682c6273d195c426e996fab6fb0c4c4 /ip6tables-restore.8 | |
parent | b32b361a725c8fe3a3aa494e6cdec09a80785aac (diff) |
Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
This enables one to have a single configuration file for both ipv4 and ipv6
firewall rules.
Example:
iptables-restore config
ip6tables-restore config
Where the file 'config' contains:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:ssh - [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -m state --state INVALID -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -4 -p icmp -j ACCEPT
-A INPUT -6 -p icmpv6 -j ACCEPT
-A INPUT -p tcp --dport 22 -m state --state NEW -j ssh
-A ssh -j ACCEPT
COMMIT
Signed-off-by: Maciej Zenczykowski <maze@google.com>
Diffstat (limited to 'ip6tables-restore.8')
0 files changed, 0 insertions, 0 deletions