Disable ICMPv6 Destination Unreachable replies

Question

iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP

The above command works for IPv4, what should be the command for IPv6 to drop the ICMPv6 destination-unreachable packets. I have tried to use ip6tables with but could not get the correct option.

ip6tables -I OUTPUT -p icmpv6 <icmpv6 type> -j DROP

What should work for ?

IPv6 really depends on ICMPv6 working correctly. If you block ICMPv6 messages, you will break things. — Ron Maupin, Oct 01 '16 at 00:43
While IPv6 depends on it it's an absurd to think that you should not block some specific ICMPs. Such FUD just clearly shows lack of understanding how protocol actually works. — poige, Dec 25 '20 at 15:34

score 4 · Answer 1 · answered Sep 30 '16 at 22:05

The iptables-extensions(8) man page gives the syntax:

   icmp6 (IPv6-specific)
       This extension can be used if  `--protocol  ipv6-icmp'  or  `--protocol
       icmpv6' is specified. It provides the following option:

       [!] --icmpv6-type type[/code]|typename
              This  allows  specification  of  the ICMPv6 type, which can be a
              numeric ICMPv6 type, type and code, or one of  the  ICMPv6  type
              names shown by the command
               ip6tables -p ipv6-icmp -h

You can list the ICMPv6 types with ip6tables -p ipv6-icmp -h, as documented in the man page.

Valid ICMPv6 Types:
destination-unreachable
   no-route
   communication-prohibited
   address-unreachable
   port-unreachable
packet-too-big
time-exceeded (ttl-exceeded)
   ttl-zero-during-transit
   ttl-zero-during-reassembly
parameter-problem
   bad-header
   unknown-header-type
   unknown-option
echo-request (ping)
echo-reply (pong)
router-solicitation
router-advertisement
neighbour-solicitation (neighbor-solicitation)
neighbour-advertisement (neighbor-advertisement)
redirect

Of course, you should not be attempting to block these packets. It will cause applications to misbehave.

Disable ICMPv6 Destination Unreachable replies

1 Answers1