Other Articles

Servers – Ensure IPv6 Outbound and Established Connections are Configured

Support > Fixing Checks > Server

06 March, 2026

This check ensures that IPv6 outbound and established connections are properly configured on the server.

Without proper rules, outbound traffic or return traffic for established connections may be blocked, leading to connectivity issues and potential service disruptions.

Check Details

  • Resource: Server
  • Check: Ensure IPv6 outbound and established connections are configured
  • Risk: Missing rules may block legitimate outbound traffic and established connections, causing application failures and network issues.

Remediation Steps

  1. Open a terminal session with root or sudo privileges.
  2. Review existing IPv6 firewall rules:

    sudo ip6tables -L -v -n
    
  3. Allow new and established outbound TCP connections:

    sudo ip6tables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
    
  4. Allow new and established outbound UDP connections:

    sudo ip6tables -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT
    
  5. Allow new and established outbound ICMP connections:

    sudo ip6tables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED -j ACCEPT
    
  6. Allow established inbound TCP connections:

    sudo ip6tables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT
    
  7. Allow established inbound UDP connections:

    sudo ip6tables -A INPUT -p udp -m state --state ESTABLISHED -j ACCEPT
    
  8. Allow established inbound ICMP connections:

    sudo ip6tables -A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT
    
  9. Save the firewall rules to persist after reboot (optional but recommended).
  10. Re-verify the rules:

    sudo ip6tables -L -v -n