IPv6 Stateful Firewall?

Discussion in 'Tomato Firmware' started by KazW, Jun 29, 2012.

  1. KazW

    KazW Serious Server Member

    Hi I'm using "Tomato Firmware v1.28.4493 MIPSR2-Toastman-VLAN-RT K26 USB VPN" and everything has been working wonderfully for the past 6 months.

    I've begun to use IPv6 more and more, and am now interested in getting a stateful firewall working. However, when I try, I get an error about an invalid argument being given to ip6tables.

    Here is what I'm trying to do with a 6in4 tunnel:
    ip6tables -A INPUT  -i v6in4 -m state --state ESTABLISHED,RELATED -j ACCEPT
    Any help would be greatly appreciated. Thanks for the great firmware! :D
  2. KazW

    KazW Serious Server Member

    I didn't mention it in my last post, but I had been looking for a kernel module. Sure enough, as soon as I added the module to my kernel, my stateful firewall was up and running. I made it permanent by adding the line below to my IPv6 wanup firewall script. Here's the command for those who are looking to do this in the future:
    modprobe nf_conntrack_ipv6.ko
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice