ip6tables는 -d 대상을 허용하지 않지만 iptables는 허용합니다.

IPv6 주소가 내 서버의 특정 IP에 연결되도록 허용하려고 하지만 다른 IP에는 연결하지 않으려고 합니다. 다음은 ip6tables에는 적용되지 않지만 일반 iptables에는 적용됩니다. 그러나 -d xx.xx.xx.77ip6tables 명령에서 이를 제거하면 해당 IP6 주소가 내가 원하지 않는 상자의 모든 IP에 연결할 수 있게 됩니다.

ip6tables -I INPUT -d xx.xx.xx.77 -i enp2s0f0 -p tcp -m multiport --dports http,https -s 2400:cb00::/32 -j ACCEPT
ip6tables v1.6.0: host/network `xx.xx.xx.77' not found

man ip6tables-d및 에 대해 다음을 표시합니다 -s.

   [!] -s, --source address[/mask][,...]
          Source  specification.  Address  can  be  either a network name, a hostname, a network IP address (with /mask), or a plain IP address. Hostnames will be resolved once only, before the rule is submitted to the kernel.  Please note that
          specifying any name to be resolved with a remote query such as DNS is a really bad idea.  The mask can be either an ipv4 network mask (for iptables) or a plain number, specifying the number of 1's at the left side of the network mask.
          Thus, an iptables mask of 24 is equivalent to 255.255.255.0.  A "!" argument before the address specification inverts the sense of the address. The flag --src is an alias for this option.  Multiple addresses can be specified, but this
          will expand to multiple rules (when adding with -A), or will cause multiple rules to be deleted (with -D).

   [!] -d, --destination address[/mask][,...]
          Destination specification.  See the description of the -s (source) flag for a detailed description of the syntax.  The flag --dst is an alias for this option.