# Generated by ip6tables-save v1.4.21 on Sat Mar 28 05:15:26 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:openstack-INPUT - [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "000 accept related established rules ipv6" -j ACCEPT
-A INPUT -p ipv6-icmp -m state --state NEW -m comment --comment "001 accept all icmp ipv6" -j ACCEPT
-A INPUT -i lo -m state --state NEW -m comment --comment "002 accept all to lo interface ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 22 -m state --state NEW -m comment --comment "003 ssh ipv6" -j ACCEPT
-A INPUT -d fe80::/64 -p udp -m multiport --dports 546 -m state --state NEW -m comment --comment "004 accept ipv6 dhcpv6 ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8042 -m state --state NEW -m comment --comment "100 aodh_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13042 -m state --state NEW -m comment --comment "100 aodh_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8787 -m state --state NEW -m comment --comment "100 docker-registry_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13787 -m state --state NEW -m comment --comment "100 docker-registry_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9292 -m state --state NEW -m comment --comment "100 glance_api_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13292 -m state --state NEW -m comment --comment "100 glance_api_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8041 -m state --state NEW -m comment --comment "100 gnocchi_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13041 -m state --state NEW -m comment --comment "100 gnocchi_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8004 -m state --state NEW -m comment --comment "100 heat_api_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13004 -m state --state NEW -m comment --comment "100 heat_api_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5050 -m state --state NEW -m comment --comment "100 ironic-inspector_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13050 -m state --state NEW -m comment --comment "100 ironic-inspector_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6385 -m state --state NEW -m comment --comment "100 ironic_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13385 -m state --state NEW -m comment --comment "100 ironic_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 35357 -m state --state NEW -m comment --comment "100 keystone_admin_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5000 -m state --state NEW -m comment --comment "100 keystone_public_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13000 -m state --state NEW -m comment --comment "100 keystone_public_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8989 -m state --state NEW -m comment --comment "100 mistral_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13989 -m state --state NEW -m comment --comment "100 mistral_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9696 -m state --state NEW -m comment --comment "100 neutron_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13696 -m state --state NEW -m comment --comment "100 neutron_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8775 -m state --state NEW -m comment --comment "100 nova_metadata_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8774 -m state --state NEW -m comment --comment "100 nova_osapi_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13774 -m state --state NEW -m comment --comment "100 nova_osapi_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8778 -m state --state NEW -m comment --comment "100 nova_placement_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13778 -m state --state NEW -m comment --comment "100 nova_placement_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8977 -m state --state NEW -m comment --comment "100 panko_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13977 -m state --state NEW -m comment --comment "100 panko_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8080 -m state --state NEW -m comment --comment "100 swift_proxy_server_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13808 -m state --state NEW -m comment --comment "100 swift_proxy_server_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 3000 -m state --state NEW -m comment --comment "100 ui_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 443 -m state --state NEW -m comment --comment "100 ui_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8888 -m state --state NEW -m comment --comment "100 zaqar_api_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 13888 -m state --state NEW -m comment --comment "100 zaqar_api_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9000 -m state --state NEW -m comment --comment "100 zaqar_ws_haproxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9000 -m state --state NEW -m comment --comment "100 zaqar_ws_haproxy_ssl ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 123 -m state --state NEW -m comment --comment "105 ntp ipv6" -j ACCEPT
-A INPUT -p vrrp -m state --state NEW -m comment --comment "106 vrrp ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 1993 -m state --state NEW -m comment --comment "107 haproxy stats ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6379,26379 -m state --state NEW -m comment --comment "108 redis ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6789,6800:6810 -m state --state NEW -m comment --comment "110 ceph ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5000,13000,35357,13357 -m state --state NEW -m comment --comment "111 keystone ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9292,9191,13292 -m state --state NEW -m comment --comment "112 glance ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6080,13080,8773,13773,8774,13774,8778,13778,8775,13775 -m state --state NEW -m comment --comment "113 nova ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9696,13696 -m state --state NEW -m comment --comment "114 neutron server ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 67 -m state --state NEW -m comment --comment "115 neutron dhcp input ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 4789 -m state --state NEW -m comment --comment "118 neutron vxlan networks ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8776,13776 -m state --state NEW -m comment --comment "119 cinder ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 3260 -m state --state NEW -m comment --comment "120 iscsi initiator ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8080,13808 -m state --state NEW -m comment --comment "122 swift proxy ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 873,6000,6001,6002 -m state --state NEW -m comment --comment "123 swift storage ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8000,13800,8003,13003,8004,13004 -m state --state NEW -m comment --comment "125 heat ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 161 -m state --state NEW -m comment --comment "127 snmp ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8042,13042 -m state --state NEW -m comment --comment "128 aodh ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8041,13041 -m state --state NEW -m comment --comment "129 gnocchi-api ipv6" -j ACCEPT
-A INPUT -p udp -m multiport --dports 69 -m state --state NEW -m comment --comment "130 tftp ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5900:5999 -m state --state NEW -m comment --comment "131 novnc ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8989,13989 -m state --state NEW -m comment --comment "132 mistral ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8888,13888 -m state --state NEW -m comment --comment "133 zaqar ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 9000 -m state --state NEW -m comment --comment "134 zaqar websockets ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 6385,13385 -m state --state NEW -m comment --comment "135 ironic ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8779,13779 -m state --state NEW -m comment --comment "136 trove ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5050 -m state --state NEW -m comment --comment "137 ironic-inspector ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8787,13787 -m state --state NEW -m comment --comment "138 docker registry ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8088 -m state --state NEW -m comment --comment "139 apache vhost ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 3000,443 -m state --state NEW -m comment --comment "142 tripleo-ui ipv6" -j ACCEPT
-A INPUT -p tcp -m multiport --dports 8977,13977 -m state --state NEW -m comment --comment "143 panko-api ipv6" -j ACCEPT
-A INPUT -j openstack-INPUT
-A INPUT -m state --state NEW -m comment --comment "998 log all ipv6" -j LOG
-A INPUT -m state --state NEW -m comment --comment "999 drop all ipv6" -j DROP
-A OUTPUT -p udp -m multiport --dports 68 -m state --state NEW -m comment --comment "116 neutron dhcp output ipv6" -j ACCEPT
-A openstack-INPUT -i lo -j ACCEPT
-A openstack-INPUT -p ipv6-icmp -j ACCEPT
-A openstack-INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A openstack-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A openstack-INPUT -p tcp -m state --state NEW -m tcp --dport 19885 -j ACCEPT
-A openstack-INPUT -j REJECT --reject-with icmp6-adm-prohibited
COMMIT
# Completed on Sat Mar 28 05:15:26 2020