fix(iptables): allow incoming DHCPv6 traffic

Not doing so makes our VM unable to retrieve its assigned IPv6 address.
ComunidadAylas · Aug 4, 2024 · bf0a188 · bf0a188
1 parent dcc97d2
commit bf0a188
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/data/cloud-config b/data/cloud-config
@@ -50,6 +50,7 @@ write_files:
       :FORWARD ACCEPT [0:0]
       :OUTPUT ACCEPT [1393:78104]
       -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
+      -A INPUT -d fe80::/64 -p udp -m conntrack --ctstate NEW -m udp --dport 546 -j ACCEPT
       -A INPUT -p ipv6-icmp -j ACCEPT
       -A INPUT -i lo -j ACCEPT
       -A INPUT -p udp -m udp --sport 123 -j ACCEPT