# Generated by ip6tables-save v1.4.21 on Sat Mar 28 07:20:03 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "000 accept related established rules ipv6" -j ACCEPT
-A INPUT -p ipv6-icmp -m state --state NEW -m comment --comment "001 accept all icmp ipv6" -j ACCEPT
-A INPUT -i lo -m state --state NEW -m comment --comment "002 accept all to lo interface ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 22 -m state --state NEW -m comment --comment "003 accept ssh from any ipv6" -j ACCEPT
-A INPUT -d fe80::/64 -p udp -m multiport --dports 546 -m state --state NEW -m comment --comment "004 accept ipv6 dhcpv6 ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 123 -m state --state NEW -m comment --comment "105 ntp ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 2022 -m state --state NEW -m comment --comment "113 nova_migration_target ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 4789 -m state --state NEW -m comment --comment "118 neutron vxlan networks ipv6" -j ACCEPT
-A INPUT -p gre -m comment --comment "136 neutron gre networks ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 16514,61152:61215,5900:6923 -m state --state NEW -m comment --comment "200 nova_libvirt ipv6" -j ACCEPT
-A INPUT -m state --state NEW -m limit --limit 20/min --limit-burst 15 -m comment --comment "998 log all ipv6" -j LOG
-A INPUT -m state --state NEW -m comment --comment "999 drop all ipv6" -j DROP
COMMIT
# Completed on Sat Mar 28 07:20:03 2020