I have a VPS with Bitfolk used as a web server/mail server. I'm running
Debian Lenny and I have iptables set up allowing ssh, www, imap, pop,
ntp etc only.
My question is what to do about firewalling ipv6 addresses. Andy's
Customer Documentation notes "those customers firewalling IPv4 will also
want to firewall (or disable) IPv6"
I see ip6tables is already installed with an empty rule set. Should I
be blocking all ipv6 traffic or setting up the same rules as for ipv4?
Also what about local traffic?
My iptables rules:
ACCEPT all -- lo any anywhere anywhere
ACCEPT all -- any any anywhere
anywhere ctstate RELATED,ESTABLISHED
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:ssh
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:www
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:https
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:imaps
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:pop3s
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:smtp
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:ntp
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:imap2
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:ssmtp
ACCEPT tcp -- any any anywhere
anywhere tcp dpt:pop3
DROP all -- any any anywhere anywhere
Thanks in advance. Martin