https://wiki.ixheim.de/index.php?action=history&feed=atom&title=IPv6_Dual_Stack_Lab_Linux_Firewall 2026-06-29T16:42:37Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=IPv6_Dual_Stack_Lab_Linux_Firewall&diff=50934&oldid=prev 2024-01-11T05:50:52Z

<p>Die Seite wurde neu angelegt: „=Forwarding einschalten= *sysctl -p net.ipv4.ip_forward = 1 net.ipv6.conf.all.forwarding = 1 =Interfaces und Routing= *cat /etc/network/interfaces &lt;pre&gt; #Wan…“</p> <p><b>Neue Seite</b></p><div>=Forwarding einschalten=<br /> *sysctl -p<br /> net.ipv4.ip_forward = 1<br /> net.ipv6.conf.all.forwarding = 1<br /> =Interfaces und Routing=<br /> *cat /etc/network/interfaces<br /> &lt;pre&gt;<br /> #Wan Schnittstelle<br /> auto ens4<br /> iface ens4 inet6 static<br /> address 2a02:24d8:71:2441::2/64<br /> gateway 2a02:24d8:71:2441::1<br /> <br /> iface ens4 inet4 static<br /> address 194.59.156.163/27 <br /> gateway 194.59.156.161<br /> <br /> #Lan Schnittstelle<br /> iface ens5 inet4 static<br /> address 192.168.44.1/24<br /> #IPv4 Rounting<br /> post-up ip -4 route add 192.168.45.0/24 via 192.168.44.2 <br /> post-up ip -4 route add 192.168.46.0/24 via 192.168.44.2 <br /> post-up ip -4 route add 192.168.47.0/24 via 192.168.44.2 <br /> <br /> auto ens5<br /> iface ens5 inet6 static<br /> address 2a02:24d8:71:2444::1/64<br /> #IPv6 Rounting<br /> post-up ip -6 route add 2a02:24d8:71:2445::0/64 via 2a02:24d8:71:2444::2<br /> post-up ip -6 route add 2a02:24d8:71:2446::0/64 via 2a02:24d8:71:2444::2<br /> post-up ip -6 route add 2a02:24d8:71:2447::0/64 via 2a02:24d8:71:2444::2<br /> &lt;/pre&gt;<br /> =nftables mit Nat=<br /> ;noch unsicher<br /> *cat /etc/nftables.conf <br /> &lt;pre&gt;<br /> #!/usr/sbin/nft -f<br /> <br /> flush ruleset<br /> <br /> table inet filter {<br /> chain input {<br /> type filter hook input priority filter;<br /> }<br /> chain forward {<br /> type filter hook forward priority filter;<br /> }<br /> chain output {<br /> type filter hook output priority filter;<br /> }<br /> }<br /> <br /> table ip nat {<br /> chain postrouting {<br /> type nat hook postrouting priority 100;<br /> oif ens4 masquerade<br /> }<br /> }<br /> &lt;/pre&gt;</div>

Thomas.will