FS#15982 - [iptables] disables v6 network

Attached to Project: Arch Linux
Opened by Zbysek MRAZ (zbyshek) - Wednesday, 19 August 2009, 00:56 GMT
Last edited by Ronald van Haren (pressh) - Wednesday, 16 December 2009, 17:22 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Ronald van Haren (pressh)
Architecture i686
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
when applying ip6tables the v6 network "crashes"
ping6 gives: connect: Network is unreachable
curl: curl: (7) Failed to connect to 2001:4860:a003::68: Network is unreachable

When turning ip6tables off, the v6 network starts to work
Note: same ip6tables script working on debian without problems

Additional info:
* package version(s)
core/iptables 1.4.4-1
kernel26 2.6.30.4-1
* config and/or log files etc.
/etc/iptables/ip6tables.rules
# Generated by ip6tables-save v1.4.4 on Tue Aug 18 18:50:29 2009
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
COMMIT
# Completed on Tue Aug 18 18:50:29 2009


Steps to reproduce:
1, put the ip6tables.rules to the /etc/iptables dir
2, /etc/rc.d/ip6tables start
3, ping6 ipv6.google.com
4,
This task depends upon

Closed by  Ronald van Haren (pressh)
Wednesday, 16 December 2009, 17:22 GMT
Reason for closing:  Implemented
Additional comments about closing:  iptables 1.4.6
Comment by Zbysek MRAZ (zbyshek) - Wednesday, 19 August 2009, 09:59 GMT
The line #22 in the initscript is doing the thing.
echo 1 >/proc/sys/net/ipv6/conf/all/forwarding

If I put there 0, everything is working as expected...
Comment by Zbysek MRAZ (zbyshek) - Wednesday, 19 August 2009, 10:05 GMT
OK, when I put this another way. When there is a forwarding enabled in /etc/conf.d/iptables the ip6tables initsrcipt disables the network

Loading...