IPv6に関しては，なかなか解らなかったんですが，ip6tablesの設定がようやく，IPv4用のiptablesと対応させてできるようになりました．意図して設定すると，その通りの挙動になることが確認できました．<\/p>\n
これまでは，so-netのルーターで，必要なサービスだけを通るようにして，サーバー（このBLOGのホスト）側では，全部OKにしていました．<\/p>\n
今回，so-netのルーターでは，宛先IPアドレスがサーバーと一致すれば全部通すようにしました．フィルタリングはサーバーのほうでしています．IPv4と同じ運用です．<\/p>\n
so-netのルーターは，20しかフィルタの設定ができないし，複数の設定の保存とか，融通も利きませんから，こういう形に持ってこようと考えてはいました．<\/p>\n","protected":false},"excerpt":{"rendered":"
IPv6\u306b\u95a2\u3057\u3066\u306f\uff0c\u306a\u304b\u306a\u304b\u89e3\u3089\u306a\u304b\u3063\u305f\u3093\u3067\u3059\u304c\uff0cip6tables\u306e\u8a2d\u5b9a\u304c\u3088\u3046\u3084\u304f\uff0cIPv4\u7528\u306eiptables\u3068\u5bfe\u5fdc\u3055\u305b\u3066\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\uff0e\u610f\u56f3\u3057\u3066\u8a2d\u5b9a\u3059\u308b\u3068\uff0c\u305d\u306e\u901a\u308a\u306e\u6319\u52d5\u306b\u306a\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u307e\u3057\u305f\uff0e \u3053\u308c\u307e\u3067\u306f\uff0cso-net\u306e\u30eb\u30fc\u30bf\u30fc\u3067\uff0c\u5fc5\u8981\u306a\u30b5\u30fc\u30d3\u30b9\u3060\u3051\u3092\u901a\u308b\u3088\u3046\u306b\u3057\u3066\uff0c\u30b5\u30fc\u30d0\u30fc\uff08\u3053\u306eBLOG\u306e\u30db\u30b9\u30c8\uff09\u5074\u3067\u306f\uff0c\u5168\u90e8OK\u306b\u3057\u3066\u3044\u307e\u3057\u305f\uff0e \u4eca\u56de\uff0cso-net\u306e\u30eb\u30fc\u30bf\u30fc\u3067\u306f\uff0c\u5b9b\u5148IP\u30a2\u30c9\u30ec\u30b9\u304c\u30b5\u30fc\u30d0\u30fc\u3068\u4e00\u81f4\u3059\u308c\u3070\u5168\u90e8\u901a\u3059\u3088\u3046\u306b\u3057\u307e\u3057\u305f\uff0e\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u30b5\u30fc\u30d0\u30fc\u306e\u307b\u3046\u3067\u3057\u3066\u3044\u307e\u3059\uff0eIPv4\u3068\u540c\u3058\u904b\u7528\u3067\u3059\uff0e so-net\u306e\u30eb\u30fc\u30bf\u30fc\u306f\uff0c20\u3057\u304b\u30d5\u30a3\u30eb\u30bf\u306e\u8a2d\u5b9a\u304c\u3067\u304d\u306a\u3044\u3057\uff0c\u8907\u6570\u306e\u8a2d\u5b9a\u306e\u4fdd\u5b58\u3068\u304b\uff0c\u878d\u901a\u3082\u5229\u304d\u307e\u305b\u3093\u304b\u3089\uff0c\u3053\u3046\u3044\u3046\u5f62\u306b\u6301\u3063\u3066\u3053\u3088\u3046\u3068\u8003\u3048\u3066\u306f\u3044\u307e\u3057\u305f\uff0e<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_daextam_enable_autolinks":"","footnotes":""},"categories":[8],"tags":[233,238,239,240],"class_list":["post-6303","post","type-post","status-publish","format-standard","hentry","category-linux","tag-ip6tables","tag-iptables","tag-ipv4","tag-ipv6"],"publishpress_future_action":{"enabled":false,"date":"2026-05-01 17:06:49","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/6303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6303"}],"version-history":[{"count":0,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/6303\/revisions"}],"wp:attachment":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}