How to block network packets that include IP options or IPv6 extensions
Issue
- How to block network packets that include IP options or IPv6 extensions
- How to use iptables/nftables/firewalld to match IP packets that include IP options
- How to use ip6tables/nftables/firewalld to match IPv6 packets that include IPv6 extensions
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.