Administrace komentářů

iptables/ip6tables v tom nie je

Ukaz vypis.

# iptables -L INPUT -xvn |head -4
Chain INPUT (policy DROP 21079 packets, 1171419 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
     722   113902 NFLOG      41   --  *      *       0.0.0.0/0            0.0.0.0/0            nflog-prefix  INPUT-ipv4-ipv6
     724   113982 ACCEPT     41   --  *      *       0.0.0.0/0            0.0.0.0/0  
...

 iptables -L OUTPUT  -xvn
Chain OUTPUT (policy ACCEPT 397391 packets, 357248411 bytes)
    pkts      bytes target     prot opt in     out     source               destination

# ip6tables -L INPUT -xvn
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
    6534   557555 NFLOG      all      *      *       ::/0                 ::/0                 nflog-prefix  ipv6
    6534   557555 ACCEPT     all      *      *       ::/0                 ::/0    

# ip6tables -L OUTPUT -xvn
Chain OUTPUT (policy ACCEPT 6054 packets, 702843 bytes)
    pkts      bytes target     prot opt in     out     source               destination

Ukaz vypis, ze systemctl

# systemctl status systemd-networkd
* systemd-networkd.service - Network Service
     Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
    Drop-In: /etc/systemd/system/systemd-networkd.service.d
             `-override.conf
     Active: active (running) since Wed 2024-04-10 18:31:27 UTC; 2h 35min ago
TriggeredBy: * systemd-networkd.socket
       Docs: man:systemd-networkd.service(8)
   Main PID: 2564703 (systemd-network)
     Status: "Processing requests..."
      Tasks: 1 (limit: 4095)
     Memory: 2.6M
     CGroup: /system.slice/systemd-networkd.service
             `-2564703 /lib/systemd/systemd-networkd

Apr 10 21:03:33 ro systemd-networkd[2564703]: rtnl: received non-static neighbor, ignoring.
Apr 10 21:03:41 ro systemd-networkd[2564703]: rtnl: received non-static neighbor, ignoring.
...

# cat /etc/systemd/network/05-disable-he-ipv6.network 
[Match]
Name=he-ipv6

[Link]
Unmanaged=yes

# networkctl list
IDX LINK    TYPE     OPERATIONAL SETUP     
  1 lo      loopback carrier     unmanaged 
  2 eno1    ether    routable    configured
  3 wlo2    wlan     off         unmanaged 
 15 sit0    sit      off         unmanaged 
 38 he-ipv6 sit      routable    unmanaged