Skip to content
This repository was archived by the owner on Jan 1, 2025. It is now read-only.

Blacklist IPV6 IP and Range(s) #825

Description

@F4FPR

Dear JKS,

It seems that it is impossible to blacklist an IPv6 or even an IPv6 range. the Kiwi network interface does not recognize the format for example (Linode in IPV6), the IPV6 address or subnetwork disappears when the change is applied. :

2600:3c00::/32
2600:3c01::/32
2600:3c02::/32
2600:3c03::/32
2600:3c04::/32
2600:3c05::/32
2600:3c06::/32
2600:3c07::/32
2600:3c08::/32
2600:3c09::/32
2600:3c0a::/32
2600:3c0b::/32
2600:3c0c::/32
2600:3c0d::/32
2600:3c0e::/32

While the following commands are perfectly recognized in SSH.

ip6tables -A INPUT -s 2600:3c00::/32 -j DROP
ip6tables -A INPUT -s 2600:3c01::/32 -j DROP
ip6tables -A INPUT -s 2600:3c02::/32 -j DROP
ip6tables -A INPUT -s 2600:3c03::/32 -j DROP
ip6tables -A INPUT -s 2600:3c04::/32 -j DROP
ip6tables -A INPUT -s 2600:3c05::/32 -j DROP
ip6tables -A INPUT -s 2600:3c06::/32 -j DROP
ip6tables -A INPUT -s 2600:3c07::/32 -j DROP
ip6tables -A INPUT -s 2600:3c08::/32 -j DROP
ip6tables -A INPUT -s 2600:3c09::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0a::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0b::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0c::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0d::/32 -j DROP
ip6tables -A INPUT -s 2600:3c0e::/32 -j DROP

Is there any way for the system to evolve on this point?

73
Benjamin F4FPR / K5AW

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions