Hi All,

Been trying out HE's IPV6 Tunnel Broker https://tunnelbroker.net
Which works great and devices on my LAN get allocated a public IPV6 address, not more NAT and no problems

However I've been port scanning the public IPV6 addresses and discovered open ports so quickly switched off the tunnel.

Looking at the Firewall Rules on the 2925 there only seems to be one option to block IPv6 traffic in the general settings "Enable Strick Firewall Block from WAN IPV6" this is enow enabled.

But I have two questions:-

1) I'm curious if there are any other settings in the 2925 which allow more refined rules for IPV6?
2) Does this setting actaully work for IPV6 Tunnels?

Anyone with any experice or ideas please let me know. Thanks in advance for any help.

Regards Gareth