Allowing IPv6 ICMP

[sonsu]

Hi!

I am using 1.4.0 with eBPF - works great so far, good job to all the contributors!

My question is, how can I allow IPv6 ICMP with system-fw.json?

currently ping google.com via ipv4 works, but ping -6 google.com does not and I am not sure how to add ip6tables rule via the config file.

[gustavo-iniguez-goya]

try this:

{
       "Rule": {
                "Description": "Allow icmpv6",
                "Table": "mangle",
                "Chain": "OUTPUT",
                "Parameters": "-p ipv6-icmp",
                "Target": "ACCEPT",
                "TargetParameters": ""
            }
}

[sonsu]

works great! Thanks once more for your help!

[zquestz]

Is there a reason this isn't the default behavior?

Just found this thread and glad I did. =)

[TriMoon]

The latest release already seems to allow icmp6 by default...

            {
              "Table": "",
              "Chain": "",
              "UUID": "4aee98da-3e87-4fc4-9ff6-86aac259697c",
              "Enabled": true,
              "Position": "0",
              "Description": "Allow ICMPv6",
              "Parameters": "",
              "Expressions": [
                {
                  "Statement": {
                    "Op": "",
                    "Name": "icmpv6",
                    "Values": [
                      {
                        "Key": "type",
                        "Value": "echo-request,echo-reply,destination-unreachable"
                      }
                    ]
                  }
                }
              ],
              "Target": "accept",
              "TargetParameters": ""
            },

Thread should be closed 😉