Shulou(Shulou.com)06/03 Report--

1. Configuration effect [root@gs ~] # ip6tables-nvLChain INPUT (policy DROP 893packets, 64296 bytes) pkts bytes target prot opt in out source destination 2630 229K ACCEPT all * *:: / 0:: / 0 state RELATED ESTABLISHED 52 6408 ACCEPT tcp * *:: / 0:: / 0 tcp dpt:80 901 107K ACCEPT tcp * *:: / 0:: / 0 tcp dpt:443 64 4304 ACCEPT all * *:: / 0 Fe80::/16 1582 103K ACCEPT all * * fe80::/16:: / 0 Chain FORWARD (policy ACCEPT 543packets 224K bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 13718 packets 1042K bytes) pkts bytes target prot opt in out source destination [root@gs ~] # II. Configuration command [root@gs ~] # cat / etc/sysconfig/ip6tables*nat:PREROUTING ACCEPT [1044 OUTPUT ACCEPT 157083]: INPUT ACCEPT [0:0]: OUTPUT ACCEPT [4V 416]: POSTROUTING ACCEPT [4V 416] COMMIT*filter:INPUT DROP [0:0]: FORWARD ACCEPT [0:0]: OUTPUT ACCEPT [0:0]-An INPUT-m state-- state RELATED ESTABLISHED-j ACCEPT-An INPUT-p tcp-m tcp-- dport 80-j ACCEPT-An INPUT-p tcp-m tcp-- dport 443J ACCEPT-An INPUT-d fe80::0/16-j ACCEPT-An INPUT-s fe80::0/16-j ACCEPTCOMMIT III. Command interpretation

Here to release fe80::/16 packets, the main reason is that in data communication, there will be a large number of fe80 addresses for communication. If you don't let it go, it will affect the use.

IV. Follow-up

This fe80 address is a magic address that can't be discarded. It needs to be used in many places and needs to be understood.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.