I have server with dual stack (both IPv4 and IPv6) configuration. I want to enable ping to the server using both IPv4 and IPv6, but my rules don't work right.
firewall-cmd --zone=public --list-all
services: ookla http https
rule family="ipv6" protocol value="icmp" accept
rule family="ipv4" protocol value="icmp" accept
With these firewall rules (target DROP, ipv6 protocol icmp accepted) server is able to be pinged on IPv4, but not on IPv6.
Red Hat Enterprise Linux
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.