diff --git a/etc/hosts.allow b/etc/hosts.allow
index 0cdc4d933e2a..8f9aa22ab0c7 100644
--- a/etc/hosts.allow
+++ b/etc/hosts.allow
@@ -34,6 +34,12 @@ ALL : PARANOID : RFC931 20 : deny
 ALL : localhost 127.0.0.1 : allow
 ALL : my.machine.example.com 192.0.2.35 : allow
 
+# To use IPv6 addresses you must enclose them in []'s
+ALL : [fe80::%fxp0]/10 : allow
+ALL : [fe80::]/10 : deny
+ALL : [3ffe:fffe:2:1:2:3:4:3fe1] : deny
+ALL : [3ffe:fffe:2:1::]/64 : allow
+
 # Sendmail can help protect you against spammers and relay-rapers
 sendmail : localhost : allow
 sendmail : .nice.guy.example.com : allow