LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-07-2016, 05:08 AM   #1
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 26

Rep: Reputation: 0
Question ipv6 working but ip6tables not counting FORWARD packets and bytes (0 counters)


Hello,

I'm on a centos 6.7 64bit box with stock kernel, ipv6 enabled configured and working.
I have a br0 configured for my virtual machines.
One of the virtual machines has ipv6 enabled and working: I can ping it from the internet and i can browse the internetv6 from within the virtual machine.
On the firewall however i see zero packets counted.
From the hypervisor : cat /etc/sysconfig/ip6tables snippet:
Quote:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
[0:0] -A -d 2001:[MY_ADDR]/128
[0:0] -A -s 2001:[MY_ADDR]/128
COMMIT
Quote:
ip6tables -L -nvx
Quote:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 all * * 2001:[MY_ADDR]/128 ::/0
Quote:
ping6 google.com
PING google.com(par03s14-in-x0e.1e100.net) 56 data bytes
64 bytes from par03s14-in-x0e.1e100.net: icmp_seq=1 ttl=58 time=4.31 ms
64 bytes from par03s14-in-x0e.1e100.net: icmp_seq=2 ttl=58 time=4.34 ms
 
Old 01-07-2016, 02:36 PM   #2
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,860

Rep: Reputation: 162Reputation: 162
Does OUTPUT counter increase after doing ping6 google.com on this machine?
 
Old 01-11-2016, 06:55 AM   #3
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 26

Original Poster
Rep: Reputation: 0
nope
 
Old 01-12-2016, 02:44 PM   #4
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,860

Rep: Reputation: 162Reputation: 162
You don't have any real iptable rule.
 
Old 01-13-2016, 04:02 AM   #5
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 26

Original Poster
Rep: Reputation: 0
well, regardless, it should increase the chain packet count rght ?
 
Old 01-13-2016, 03:07 PM   #6
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,860

Rep: Reputation: 162Reputation: 162
No, these counters are relative to particular rule. If no rule is hit, why counter increase?
 
Old 01-14-2016, 06:16 AM   #7
wildwizard
Member
 
Registered: Apr 2009
Location: Oz
Distribution: slackware64-14.0
Posts: 875

Rep: Reputation: 282Reputation: 282Reputation: 282
If the firewall is the hyper-visor then I'm not surprised.

You've created a L2 connection between your VM's and the external network the host will not see L3 traffic from the VM's

If you want to use the hyper-visor's firewall like that then you should create host only links from the VM's so the traffic is forced through the hosts IP stack.
 
  


Reply

Tags
bandwidth, counting, ipv6


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Need explanation of /proc/net/dev bytes counters waddles Linux - Networking 6 04-21-2013 01:20 AM
iptables POSTROUTING and FORWARD counters rey Linux - Security 3 05-12-2012 07:09 PM
ipv6/ ip6tables can't ping from behind router donnied Linux - Networking 0 08-25-2008 07:25 PM
counting packets with ethernet interface galaxy.ice Programming 5 08-01-2008 03:12 AM
Counting bytes with ifconfig FredrikN Linux - Networking 2 12-17-2001 12:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:30 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration