ip6tables does not allow any traffic

I have been struggling getting ip6tables to work. It is for a CentOS 6 server running DirectAdmin, hence the ports.
Could someone please tell me why it does not allow any traffic?

Any input on this is highly appreciated, as I am stuck at this for days now.

/sbin/ip6tables -F
/sbin/ip6tables -t mangle -F
/sbin/ip6tables -A INPUT -i lo -j ACCEPT
/sbin/ip6tables -A OUTPUT -o lo -j ACCEPT
/sbin/ip6tables -P INPUT DROP
/sbin/ip6tables -P OUTPUT ACCEPT
/sbin/ip6tables -P FORWARD DROP
/sbin/ip6tables -t mangle -P PREROUTING ACCEPT
/sbin/ip6tables -t mangle -P OUTPUT ACCEPT
/sbin/ip6tables -X
/sbin/ip6tables -t mangle -X
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,FIN FIN -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,PSH PSH -j DROP
/sbin/ip6tables -A INPUT -p tcp --tcp-flags ACK,URG URG -j DROP
/sbin/ip6tables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -m state --state INVALID -j DROP
/sbin/ip6tables -A INPUT -i eth0 -s aaaa:bbbb:cccc:dddd:: -j DROP
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 80 -m connlimit --connlimit-above 10 -j DROP
/sbin/ip6tables -A INPUT -i eth0 -s 0:0:0:0:0:0:0:1 -j DROP
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 20 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 21 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 35000:35999 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 25 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 587 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 53 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p udp -d aaaa:bbbb:cccc:dddd:: --dport 53 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 80 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 443 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 110 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 995 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 143 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 993 -m state --state NEW -j ACCEPT
/sbin/ip6tables -A INPUT -i eth0 -p tcp -d aaaa:bbbb:cccc:dddd:: --dport 2222 -m state --state NEW -j ACCEPT

Try allowing icmpv6. (for testing, just add “ip6tables -I INPUT -p icmpv6 -j ACCEPT”).

In IPv6 you really need alot of ICMPv6.

Here is the rfc.

Check more discussion of this question.

Related posts:

1. ip6tables blocking output traffic
2. ipTables: How to improve the current set-up?
3. Moving Microsoft Exchange server to the private network
4. Linux: Invalid TCP Flags
5. Linux – What’s wrong with these Iptables rules?