Trying the following on a centos 6 node (running openvz kernel)
ip6tables -F
ip6tables -X
ip6tables -P FORWARD DROP
ip6tables -A FORWARD -p tcp -m multiport --dports 21,22,80,443 -j ACCEPT
ip6tables -A FORWARD -p udp -m multiport --dports 21,22,80,443 -j ACCEPT
ip6tables -A FORWARD -p ipv6-icmp -j ACCEPT
However, this seems to disable ipv6 connectivity from the openvz VPS outwards to the node, or the internet, and on a port scanner it shows all ports as filtered/blocked by firewall.
However, pinging the vps from within the node to the VPS works fine.
All that I am trying to do is to drop all forward, and accept the multiple ports shown above, and allow ipv6 connectivity to pass through.
It is definitely an ip6tables issue, as when I stop ip6tables, it runs fine and pinging is absolutely okay.
Your help is appreciated.