DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

2862 IPV6 Firewall Settings

  • alucidnation
  • Topic Author
  • User
  • User
More
25 Apr 2019 08:32 #1 by alucidnation
2862 IPV6 Firewall Settings was created by alucidnation
Hi guys,

Now up and running (i think!) with my new ISP that is IPV6.

To make sure i had it all running properly, i used this site to test everything..

https://ipv6-test.com/

As it happens, it all seems to be ok, however, my score is 17/20, and one of the main suggestions is to check the firewall settings as
it is filtering ICMPv6 messages sent to my computer.

Having had a quick scan of the firewall settings, i am stumped as to where or what i should be looking for.

Any help appreciated.

:)

Please Log in or Create an account to join the conversation.

More
27 Apr 2019 15:02 #2 by admin
Replied by admin on topic Re: 2862 IPV6 Firewall Settings
Why would filtering (blocking) ICMP messages be a problem in typical usage?



Forum Administrator

Please Log in or Create an account to join the conversation.

  • alucidnation
  • Topic Author
  • User
  • User
More
27 Apr 2019 15:07 #3 by alucidnation
Replied by alucidnation on topic Re: 2862 IPV6 Firewall Settings
Not sure to be honest.

It was only what the test showed and after reading a few articles.


If you think it’s ok to leave then I will.

:)

Please Log in or Create an account to join the conversation.

  • cocospm
  • User
  • User
More
29 Apr 2019 01:28 #4 by cocospm
Replied by cocospm on topic Re: 2862 IPV6 Firewall Settings
Unlike ICMP in IPv4, ICMPv6 is vital to the correct functioning of IPv6, and blocking it fully may cause connectivity issues. This is covered in RFC 4890, here: https://tools.ietf.org/html/rfc4890 . You can allow ICMPv6 in the 2862 by adding a suitable firewall filter rule which allows the protocol in the WAN -> LAN/DMZ/RT/VPN direction.

The 2862's IPv6 support is, however, sadly lacking in some respects, and - if I am not mistaken - one of these is the ability to filter specific ICMPv6 packet types. It seems it only has all-or-nothing ICMPv6 blocking, so you have to choose between potential connectivity issues and effective security/privacy.

Please Log in or Create an account to join the conversation.

  • alucidnation
  • Topic Author
  • User
  • User
More
29 Apr 2019 07:42 #5 by alucidnation
Replied by alucidnation on topic Re: 2862 IPV6 Firewall Settings
Thanks for the reply.

Must admit there has been a couple of times i have tried to use Google search and when trying to load a further page of results, it just hangs.

Edit: just to add uploading these images, the page 'stopped' working.

I have just set this up and wondered if you could confirm i have done it correctly?

:D




Please Log in or Create an account to join the conversation.

  • cocospm
  • User
  • User
More
29 Apr 2019 11:54 #6 by cocospm
Replied by cocospm on topic Re: 2862 IPV6 Firewall Settings
No, your Service Type protocol needs to be ICMPv6, not ICMP (which is for IPv4).

Also, I much prefer not to add custom rules to the default Filter Sets 1 or 2, but to add them to Set 3 (or later). If you do this, make sure Filter Set 2's "Next Filter Set" is set to "Set#3".

Once done, re-test via https://ipv6-test.com/ .

Please Log in or Create an account to join the conversation.