Skip to content

Instantly share code, notes, and snippets.

@w1ndy

w1ndy/ipv6-router.sh

Created January 22, 2021 20:57
Download ZIP

Revisions

  1. w1ndy created this gist Jan 22, 2021.
    11 changes: 11 additions & 0 deletions ipv6-router.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,11 @@
    modprobe ip6table_mangle
    ebtables -t broute -A BROUTING -p ! ipv6 -j DROP -i eth2.2
    brctl addif br0 eth2.2

    echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 --state NEW -j DROP
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 -p udp --dport 6881 --state NEW -j ACCEPT
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 -p tcp --dport 5000 --state NEW -j ACCEPT
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 -p tcp --dport 6443 --state NEW -j ACCEPT
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 -p tcp --dport 8096 --state NEW -j ACCEPT
    ip6tables -I FORWARD 1 -m physdev -m state --physdev-in eth2.2 -p tcp --dport 16881 --state NEW -j ACCEPT