This.
At least, if you&#x27;re not ready to accept incoming v6 connections (which really isn&#x27;t hard to do), use connection tracking to let outbound v6 through and add the necessary icmpv6 accept rules.<p>ufw comes pre-installed on ubuntu and is dead simple to use, there&#x27;s really no reason not to use it.<p><pre><code>  # ufw allow 22&#x2F;tcp
  # ufw enable
</code></pre>
should be all you need to have connection tracking on both v6 and v4, have a tried and trusted icmpv6 accept list, and keep your v6 and v4 firewalls in sync.