I have to use IPv6 to access my debian 10 server using SSH.
Here is the current output of iptables-save, which works still well in IPv4
Code: Select all
# Generated by iptables-save v1.6.0 on Wed Apr 1 15:00:13 2020
*filter
:INPUT DROP [125:9610]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [511:77841]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
COMMIT
# Completed on Wed Apr 1 15:00:13 2020
Code: Select all
# Generated by xtables-save v1.8.2 on Mon Mar 27 21:11:49 2023
*filter
:INPUT DROP [125:9610]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [511:77841]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
COMMIT
# Completed on Mon Mar 27 21:11:49 2023
- new incoming ssh connections are not possible
- already active ssh connections work for ~10 secconds, then are freezed, until I run iptables -P INPUT ACCEPT
Obviously, ESTABLISHED connections are not accepted in IPv6.
Do you folks have any idea why ?
Thanks