Hi,

I know that in IPv6 there is no need for NAT and therefore all devices can in theory be accessed directly from the internet. At the moment the Draytek firewall blocks all routing connections initiated on the WAN for IPv6 by default, and as far as I can see that is the only option that exists right now: Block all or allow all.

As IPv6 takes over will there ever be a more advanced firewall that allows or blocks traffic to specific IPv6 addresses or even specific ports on IPv6 addresses? Or will users have to rely entirely on the firewall that each device has?

Cheers

Bradley

Which product/firmware are you using?

I'm using vigor 2925 and just upgraded the firmware to latest version, can't remember the number but will check later.

Okay, I have been looking at this again and I think I get it now.

You can't add ipv6 addresses directly in the filter rules like you can with ipv4, instead you have to create an ipv6 object first and then create the rule using the object.

From this I have another question, in ipv6 objects it is possible to select a mac address, does this mean that if you use the mac address in a firewall rule then the traffic will be passed/blocked on any ipv6 address associated with that mac?

Did you find an answer? I'm still trying to work out the ipv6 filter rules.