It seems that it is impossible to blacklist an IPv6 or even an IPv6 range. the Kiwi network interface does not recognize the format for example (Linode in IPV6), the IPV6 address or subnetwork disappears when the change is applied. :
While the following commands are perfectly recognized in SSH.
ip6tables -A INPUT -s 2600:3c00::/32 -j DROP
ip6tables -A INPUT -s 2600:3c01::/32 -j DROP
ip6tables -A INPUT -s 2600:3c02::/32 -j DROP
ip6tables -A INPUT -s 2600:3c03::/32 -j DROP
ip6tables -A INPUT -s 2600:3c04::/32 -j DROP
ip6tables -A INPUT -s 2600:3c05::/32 -j DROP
ip6tables -A INPUT -s 2600:3c06::/32 -j DROP
ip6tables -A INPUT -s 2600:3c07::/32 -j DROP
ip6tables -A INPUT -s 2600:3c08::/32 -j DROP
ip6tables -A INPUT -s 2600:3c09::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0a::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0b::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0c::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0d::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0e::/32 -j DROP
Is there any way for the system to evolve on this point?
Dear JKS,
It seems that it is impossible to blacklist an IPv6 or even an IPv6 range. the Kiwi network interface does not recognize the format for example (Linode in IPV6), the IPV6 address or subnetwork disappears when the change is applied. :
2600:3c00::/32 2600:3c01::/32 2600:3c02::/32 2600:3c03::/32 2600:3c04::/32 2600:3c05::/32 2600:3c06::/32 2600:3c07::/32 2600:3c08::/32 2600:3c09::/32 2600:3c0a::/32 2600:3c0b::/32 2600:3c0c::/32 2600:3c0d::/32 2600:3c0e::/32
While the following commands are perfectly recognized in SSH.
ip6tables -A INPUT -s 2600:3c00::/32 -j DROP ip6tables -A INPUT -s 2600:3c01::/32 -j DROP ip6tables -A INPUT -s 2600:3c02::/32 -j DROP ip6tables -A INPUT -s 2600:3c03::/32 -j DROP ip6tables -A INPUT -s 2600:3c04::/32 -j DROP ip6tables -A INPUT -s 2600:3c05::/32 -j DROP ip6tables -A INPUT -s 2600:3c06::/32 -j DROP ip6tables -A INPUT -s 2600:3c07::/32 -j DROP ip6tables -A INPUT -s 2600:3c08::/32 -j DROP ip6tables -A INPUT -s 2600:3c09::/32 -j DROP ip6tables -A INPUT -s 2600:3c0a::/32 -j DROP ip6tables -A INPUT -s 2600:3c0b::/32 -j DROP ip6tables -A INPUT -s 2600:3c0c::/32 -j DROP ip6tables -A INPUT -s 2600:3c0d::/32 -j DROP ip6tables -A INPUT -s 2600:3c0e::/32 -j DROP
Is there any way for the system to evolve on this point?
73 Benjamin F4FPR / K5AW