Re: m0n0wall bug(?) when using IPv6
Antonios Atlasis <[email protected]> Sun, 19 Oct 2014 00:26:35 +0300
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <CADoTVZ+p=OoNCDGS013dOAx1f72yyxAvG0=f6MtEpgMifoN45g@mail.gmail.com> |
--089e0122fa24dc11ee0505b92288 Content-Type: text/plain; charset=UTF-8 Hi list, unfortunately the problem described in my e-mail quoted below still persists. To sum up, after rebooting m0n0wall, my outgoing IPv6 connection attempts are not block_ only_if_ I edit and "Apply" the IPv6 LAN rules, although I do _not_ actually change anything. If I do not follow this procedure, my IPv6 connection attempts are blocked. I verify at the Firewall logs the blocked connection attempts. Any help will be highly appreciated. status.php file is available, if requested. Best Antonios 2014-05-31 12:15 GMT+03:00 Antonios Atlasis <[email protected]>: > Dear list, > > a couple of days ago I installed the latest m0n0wall release (version > 1.8.1) to my ALiX box and I configured it to use IPv6 too (IPv6 mode at WAN > interface: PPP, at LAN: DHCP-PD and sending RA messages at the LAN > interface too). > > Although my laptop got an IPv6 address, I realised that in order to access > a web site using IPv6, access was blocked and there was a log message that > the outgoing traffic at this specific site had been blocked at the LAN > interface. So, I added an IPv6 rule at the LAN interface from "LAN net " -> > any to allow IPv6 traffic and it worked! > > Weird, I thought because I had assumed that this was the case by default > (to allow outgoing traffic) but no big deal. > > Next day, after shutting down and starting up again m0n0wall, I faced the > same problem. Outgoing IPv6 traffic was blocked although my laptop had got > a unicast IPv6 address, but the rule that I had added was still there too. > I confirmed that there were similar logs that showed that the outgoing > traffic was blocked. I "Edit" the rule, then I DID NOT change anything, I > pressed "Save", "Apply", and it worked again. > > Has anyone else experienced similar problem? Am I missing sthg? > > Best > > Antonios > --089e0122fa24dc11ee0505b92288--