LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-12-2014, 08:01 AM   #1
n0xlf
LQ Newbie
 
Registered: Sep 2014
Posts: 2

Rep: Reputation: Disabled
Block incoming IPv6 access to LAN clients with firewalld?


I'm just getting started in the IPv6 world but have run into a problem that I can't solve involving firewalld on F20.

I do all of my routing through my F20 server and use firewalld (with firewall-config for ease of configuration).

Here is my IPv6 setup:

bond0 (LAN) - fe80::/64 and 2601::/64
p3p1 (WAN) - fe80::/64 only
p3p1 in external zone in firewalld with allowed services/port forwards

dnsmasq is serving 2601::/64 IPs to my LAN machines on bond0 and doing RAs. Firewalld is not blocking anything incoming for those LAN machines. For services local to the server, firewalld IS blocking/allowing IPv6 traffic as expected.

Is there something I can add to firewalld to block incoming IPv6 traffic to my LAN?

Thanks!!
 
Old 09-12-2014, 08:14 PM   #2
n0xlf
LQ Newbie
 
Registered: Sep 2014
Posts: 2

Original Poster
Rep: Reputation: Disabled
Solved temporarily here...

http://forums.fedoraforum.org/showth...33#post1709933
 
Old 09-12-2014, 09:23 PM   #3
jefro
Moderator
 
Registered: Mar 2008
Posts: 19,318

Rep: Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960Reputation: 2960
Thanks for the update and solution.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to Drop or Block Incoming Access From Specific IP Address Using Iptables jaydul Linux - Newbie 1 10-17-2013 10:10 PM
[SOLVED] after openvpn upgrade, clients can access SOME lan machines but not others... ? psycroptic Linux - Networking 3 04-22-2013 09:42 PM
Cannot access wired lan clients from wifi client J_Szucs Linux - Hardware 4 10-06-2009 03:04 PM
[SOLVED] Iptables: LAN clients cannot access internet Sum1 Linux - Security 28 09-21-2009 12:42 AM
SQUID:How can I block my LAN clients accessing Internet mwj Linux - Networking 1 10-27-2003 05:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 10:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration