diff --git a/roles/ariane/tasks/iptables.yml b/roles/ariane/tasks/iptables.yml
index fe517eb..45ad62e 100644
--- a/roles/ariane/tasks/iptables.yml
+++ b/roles/ariane/tasks/iptables.yml
@@ -6,3 +6,8 @@
   template: dest=/etc/iptables/rules.v4 src=iptables_rules_v4.j2 owner=root group=root mode=0644
   notify:
     iptables restore
+
+- name: /etc/iptables/rules.v6
+  template: dest=/etc/iptables/rules.v6 src=iptables_rules_v6.j2 owner=root group=root mode=0644
+  notify:
+    iptables restore
diff --git a/roles/ariane/templates/iptables_rules_v6.j2 b/roles/ariane/templates/iptables_rules_v6.j2
new file mode 100644
index 0000000..d2927b5
--- /dev/null
+++ b/roles/ariane/templates/iptables_rules_v6.j2
@@ -0,0 +1,12 @@
+# {{ ansible_managed }}
+
+*filter
+:INPUT DROP [0:0]
+:FORWARD DROP [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -p tcp --syn -j DROP
+-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
+-A INPUT -p ipv6-icmp -j ACCEPT
+-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
+-A INPUT -i lo -j ACCEPT
+COMMIT