Translating iptables rule to ip6tables

Question

What's the equivalent of this iptables rule in ip6tables:

-A OUTPUT -s 127.0.0.1/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080

I tried this and it doesn't seem to work:

-A OUTPUT -s ::1/128 -p tcp -m tcp --dport 80 -j REDIRECT --on-port 8080

I don't believe output loopback traffic traverses the output table normally, but I could be wrong about that. — Falcon Momot, Aug 28 '13 at 09:16
What kernel version? ip6tables supports nat for kernels >= 3.7 — Laurentiu Roescu, Aug 28 '13 at 09:26
Kernel 2.6.32. Yes I now read that nat is supported form 3.7 and above. Thanks! — BlackBeret, Aug 28 '13 at 11:27

score 1 · Answer 1 · edited Apr 13 '17 at 12:14

1

The REDIRECT target is only available for IPv4.

To redirect IPv6 traffic, you can use TPROXY (in very recent versions of netfilter), or use a userland port forwarding utility such as xinetd.

edited Apr 13 '17 at 12:14

Community

1

answered Aug 28 '13 at 15:13

Michael Hampton

237,123
42
477
940

score 0 · Answer 2 · answered Aug 28 '13 at 09:20

0

I believe you should use ip6tables instead of iptables when handling IPv6 traffic; I have not tried though if the standard iptables command can handle IPv6.

answered Aug 28 '13 at 09:20

Janne Pikkarainen

31,454
4
56
78

Yes that's what I do, using /etc/sysconfig/ip6tables (CentOS) – BlackBeret Aug 28 '13 at 09:28
Are you sure since you are pasting us the minimal amount of information? – Janne Pikkarainen Aug 28 '13 at 09:32
Yes, seems like ip6tables does not support port redirection. http://stackoverflow.com/questions/4304342/redirect-a-port-in-ip6tables – BlackBeret Aug 28 '13 at 10:38

Translating iptables rule to ip6tables

2 Answers2