API tools faq
paste
Eh1Eiz1a

icmpv6

Eh1Eiz1a
May 20th, 2025
84
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.81 KB | Source Code | 0 0
raw download clone embed print report
  1. /ipv6 firewall filter
  2. add action=passthrough chain=icmp comment="icmpv6 see at https://www.iana.org/assignments/icmpv6-parameters/icmpv6-parameters.xhtml" disabled=yes
  3. add action=accept chain=icmp comment="Destination Unreachable (Type1, Code0-4)" icmp-options=1:0-255 protocol=icmpv6
  4. add action=accept chain=icmp comment="Packet Too Big (Type2, Code0)" icmp-options=2:0-255 protocol=icmpv6
  5. add action=accept chain=icmp comment="Time Exceeded (Type3, Code0)" icmp-options=3:0-255 protocol=icmpv6
  6. add action=accept chain=icmp comment="Parameter Problem (Type 4, Code0-2)" icmp-options=4:0-255 protocol=icmpv6
  7. add action=accept chain=icmp comment="Echo Request (Type128, Code0)" icmp-options=128:0-255 in-interface-list=WAN6 protocol=icmpv6
  8. add action=accept chain=icmp comment="Echo Request (Type128, Code0)" icmp-options=128:0-255 in-interface-list=!WAN6 protocol=icmpv6
  9. add action=accept chain=icmp comment="Echo Reply (Type129, Code0)" icmp-options=129:0-255 protocol=icmpv6
  10. add action=accept chain=icmp comment="Multicast Listener Query (Type 130, Code0)" icmp-options=130:0-255 in-interface-list=!WAN6 protocol=icmpv6
  11. add action=accept chain=icmp comment="Multicast Listener Report (Type 131, Code0)" icmp-options=131:0-255 protocol=icmpv6
  12. add action=accept chain=icmp comment="Multicast Listener Done (Type 132, Code0)" icmp-options=132:0-255 protocol=icmpv6
  13. add action=accept chain=icmp comment="Router Solicitation (RS) (Type133, Code0) NDP and SLAAC" icmp-options=133:0-255 protocol=icmpv6
  14. add action=accept chain=icmp comment="Router Advertisement (RA) (Type134, Code0) NDP and SLAAC" icmp-options=134:0-255 protocol=icmpv6
  15. add action=accept chain=icmp comment="Neighbour Solicitation (NS) (Type135, Code0) NDP and SLAAC" icmp-options=135:0-255 protocol=icmpv6
  16. add action=accept chain=icmp comment="Neighbour Advertisement (NA) (Type136, Code0) NDP and SLAAC" icmp-options=136:0-255 protocol=icmpv6
  17. add action=accept chain=icmp comment="Redirect (Type137, Code0) NDP and SLAAC" icmp-options=137:0-255 protocol=icmpv6
  18. add action=accept chain=icmp comment="Router Renumbering (Type138, Code0)" icmp-options=138:0-255 protocol=icmpv6
  19. add action=accept chain=icmp comment="ICMP Node Information Query (Type139, Code0-2)" icmp-options=139:0-2 in-interface-list=!WAN6 protocol=icmpv6
  20. add action=accept chain=icmp comment="ICMP Node Information Response (Type140, Code0-2)" icmp-options=140:0-2 protocol=icmpv6
  21. add action=accept chain=icmp comment="Inverse Neighbor Discovery (Type141, Code0)" icmp-options=141:0 in-interface-list=!WAN6 protocol=icmpv6
  22. add action=accept chain=icmp comment="Inverse Neighbor Discovery (Type142, Code0)" icmp-options=142:0 in-interface-list=!WAN6 protocol=icmpv6
  23. add action=accept chain=icmp comment="Home Agent Address Discovery (Type144, Code0)" icmp-options=144:0 in-interface-list=!WAN6 protocol=icmpv6
  24. add action=accept chain=icmp comment="Home Agent Address Discovery (Type145, Code0)" icmp-options=145:0 in-interface-list=!WAN6 protocol=icmpv6
  25. add action=accept chain=icmp comment="Mobile Prefix Solicitation (Type146, Code0)" icmp-options=146:0 protocol=icmpv6
  26. add action=accept chain=icmp comment="Mobile Prefix Advertisement (Type147, Code0)" icmp-options=147:0 protocol=icmpv6
  27. add action=accept chain=icmp comment="Duplicate Address Request Code Suffix (Type157, Code0-15)" icmp-options=157:0-15 protocol=icmpv6
  28. add action=accept chain=icmp comment="Duplicate Address Confirmation Code Suffix (Type158, Code0-15)" icmp-options=158:0-15 protocol=icmpv6
  29. add action=accept chain=icmp comment="Extended Echo Request (Type160, Code0-255)" icmp-options=160:0-255 protocol=icmpv6
  30. add action=accept chain=icmp comment="Extended Echo Reply (Type161, Code0-255)" icmp-options=161:0-255 protocol=icmpv6
  31. add action=drop chain=icmp comment="drop other icmpv6" log=yes log-prefix=ICMPV6unknown protocol=icmpv6
  32. add action=return chain=icmp
  33.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!