Re: [oS-en] Blocking incoming from Internet IPv6 connections using firewalld

On 23.04.2023 23:41, Carlos E. R. wrote:

Beta:~ # firewall-cmd --permanent --zone=public \ --add-rich-rule='rule source mac="...:d4" reject'\ success Beta:~ #

Then I try to ssh from Isengard to Beta, both IPv4 and IPv6. It works, as I expected.

You need to reload firewalld after changing permanent configuration. And I probably missed family=ipv6 firewall-cmd --permanent --zone=public --add-rich-rule='rule familty="ipv6" source mac="AA:BB:CC:DD:EE:FF" reject'