Linux中ipv6的防火墙怎么设置呢？

new_learner 发表于 2009-04-08 10:46:17

想了解一下，在Linux中，是通过iptables来设置ipv6的防火墙吗？
还是说有其他的工具来配置ipv6防火墙？

谢谢～

ssffzz1 发表于 2009-04-08 11:19:42

iptables6
好像是这个名字吧。

yubuhuifei 发表于 2009-11-26 13:50:13

回复 #1 new_learner 的帖子

其实配置防火墙的都是netfiter了；iptables是配置ipv4的工具；而ipv6相应的工具是ip6tables.ip6tables的使用跟iptables基本相同；（除了个别差别外，比如ipv6没有NAT tables，地址格式跟ipv4不一样。。。）

chenyx 发表于 2009-11-26 15:43:11

回复 #2 ssffzz1 的帖子

是ip6tables

ssffzz1 发表于 2009-11-26 16:05:03

原帖由 chenyx 于 2009-11-26 15:43 发表 http://bbs2.chinaunix.net/images/common/back.gif
是ip6tables

是吗？？记不太清楚了。好久不LINUX了。

RYBACK 发表于 2009-11-27 18:25:09

呃，咱还连IPV6的地址都没弄明白

wuwenhua 发表于 2010-03-15 15:55:13

是的是用ip6tables

NE_Rain 发表于 2010-04-03 14:47:54

ip6tables v1.3.5

Usage: ip6tables - chain rule-specification
   ip6tables - chain rulenum rule-specification
   ip6tables -D chain rulenum
   ip6tables -
   ip6tables - chain
   ip6tables -E old-chain-name new-chain-name
   ip6tables -P chain target
   ip6tables -h (print this help information)

Commands:
Either long or short options are allowed.
  --append  -A chain          Append to chain
  --delete  -D chain          Delete matching rule from chain
  --delete  -D chain rulenum
                              Delete rule rulenum (1 = first) from chain
  --insert  -I chain
                              Insert in chain as rulenum (default 1=first)
  --replace -R chain rulenum
                              Replace rule rulenum (1 = first) in chain
  --list -L       List the rules in a chain or all chains
  --flush -F       Delete all rules in  chain or all chains
  --zero -Z       Zero counters in chain or all chains
  --new    -N chain          Create a new user-defined chain
  --delete-chain
         -X       Delete a user-defined chain
  --policy  -P chain target
                              Change policy on chain to target
  --rename-chain
         -E old-chain new-chain
                              Change chain name, (moving any references)
Options:
  --proto    -p [!] proto protocol: by number or name, eg. `tcp'
  --source    -s [!] address
                              source specification
  --destination -d [!] address
                              destination specification
  --in-interface -i [!] input name[+]
                              network interface name ([+] for wildcard)
  --jump       -j target
                              target for rule (may load target extension)
  --match    -m match
                              extended match (may load extension)
  --numeric    -n             numeric output of addresses and ports
  --out-interface -o [!] output name[+]
                              network interface name ([+] for wildcard)
  --table    -t table       table to manipulate (default: `filter')
  --verbose    -v             verbose mode
  --line-numbers             print line numbers when listing
  --exact    -x             expand numbers (display exact values)
  --modprobe=<command>       try to insert modules using this command
  --set-counters PKTS BYTES    set the counter during insert/append
[!] --version -V             print package version.

页: [1]

ChinaUnix.net's Archiver