diff --git a/ipv6-tools b/ipv6-tools index b8eb75a47998beb20a5f22c9b8bdbfdb5d9026aa..f6c0bfd6dcdbb43f9f070767a604483d88f52c70 100644 --- a/ipv6-tools +++ b/ipv6-tools @@ -388,23 +388,27 @@ eof function doc_ipf6() { cat << EOF - -# ----------------------------------------- +#---------------------------------------------- # ipv6 cd /etc/ipf saveback ipf6.conf -vim ipf6.con6 + +vim ipf6.conf + # enable IN rules and be polite inside our network with block return-rst in quick proto tcp from 2001:620:600::0/48 to <thishost> head i_global block return-rst in quick proto tcp from fd69:620:600::0/48 to <thishost> head i_global block in quick from any to <thishost> head i_global + # enable OUT rules block out quick from <thishost> to any head o_global + # for eg allow http and https with respectively i_global & o_global pass in quick proto tcp from any to any port = 80 group i_global pass in quick proto tcp from any to any port = 443 group i_global pass out quick proto tcp from any port = 80 to any group o_global pass out quick proto tcp from any port = 443 to any group o_global +#---------------------------------------------- EOF }