DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
IPv6 Firewall
- therealbraderz
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 20
- Thank you received: 0
31 Jul 2017 21:47 #1
by therealbraderz
IPv6 Firewall was created by therealbraderz
Hi,
I know that in IPv6 there is no need for NAT and therefore all devices can in theory be accessed directly from the internet. At the moment the Draytek firewall blocks all routing connections initiated on the WAN for IPv6 by default, and as far as I can see that is the only option that exists right now: Block all or allow all.
As IPv6 takes over will there ever be a more advanced firewall that allows or blocks traffic to specific IPv6 addresses or even specific ports on IPv6 addresses? Or will users have to rely entirely on the firewall that each device has?
Cheers
Bradley
I know that in IPv6 there is no need for NAT and therefore all devices can in theory be accessed directly from the internet. At the moment the Draytek firewall blocks all routing connections initiated on the WAN for IPv6 by default, and as far as I can see that is the only option that exists right now: Block all or allow all.
As IPv6 takes over will there ever be a more advanced firewall that allows or blocks traffic to specific IPv6 addresses or even specific ports on IPv6 addresses? Or will users have to rely entirely on the firewall that each device has?
Cheers
Bradley
Please Log in or Create an account to join the conversation.
- admin
- Offline
- Site Admin
-
Less
More
- Posts: 1723
- Thank you received: 0
01 Aug 2017 11:26 #2
by admin
Forum Administrator
Replied by admin on topic Re: IPv6 Firewall
Which product/firmware are you using?
Forum Administrator
Please Log in or Create an account to join the conversation.
- therealbraderz
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 20
- Thank you received: 0
01 Aug 2017 14:01 #3
by therealbraderz
Replied by therealbraderz on topic Re: IPv6 Firewall
I'm using vigor 2925 and just upgraded the firmware to latest version, can't remember the number but will check later.
Please Log in or Create an account to join the conversation.
- therealbraderz
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 20
- Thank you received: 0
01 Aug 2017 22:51 #4
by therealbraderz
Replied by therealbraderz on topic Re: IPv6 Firewall
Okay, I have been looking at this again and I think I get it now.
You can't add ipv6 addresses directly in the filter rules like you can with ipv4, instead you have to create an ipv6 object first and then create the rule using the object.
From this I have another question, in ipv6 objects it is possible to select a mac address, does this mean that if you use the mac address in a firewall rule then the traffic will be passed/blocked on any ipv6 address associated with that mac?
You can't add ipv6 addresses directly in the filter rules like you can with ipv4, instead you have to create an ipv6 object first and then create the rule using the object.
From this I have another question, in ipv6 objects it is possible to select a mac address, does this mean that if you use the mac address in a firewall rule then the traffic will be passed/blocked on any ipv6 address associated with that mac?
Please Log in or Create an account to join the conversation.
- majicf
- Offline
- New Member
-
Less
More
- Posts: 9
- Thank you received: 0
13 Sep 2017 00:11 #5
by majicf
Replied by majicf on topic Re: IPv6 Firewall
Did you find an answer? I'm still trying to work out the ipv6 filter rules.
Please Log in or Create an account to join the conversation.
Moderators: Sami
Copyright © 2024 DrayTek