Re: m0n0wall bug(?) when using IPv6

Antonios Atlasis <[email protected]> Sun, 19 Oct 2014 00:26:35 +0300
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <CADoTVZ+p=OoNCDGS013dOAx1f72yyxAvG0=f6MtEpgMifoN45g@mail.gmail.com>
--089e0122fa24dc11ee0505b92288
Content-Type: text/plain; charset=UTF-8

Hi list,

unfortunately the problem described in my e-mail quoted below still
persists. To sum up, after rebooting m0n0wall, my outgoing IPv6 connection
attempts are not block_ only_if_ I edit and "Apply" the IPv6 LAN rules,
although I do _not_ actually change anything. If I do not follow this
procedure, my IPv6 connection attempts are blocked. I verify at the
Firewall logs the blocked connection attempts.

Any help will be highly appreciated. status.php file is available, if
requested.

Best

Antonios

2014-05-31 12:15 GMT+03:00 Antonios Atlasis <[email protected]>:

> Dear list,
>
> a couple of days ago I installed the latest m0n0wall release (version
> 1.8.1) to my ALiX box and I configured it to use IPv6 too (IPv6 mode at WAN
> interface: PPP, at LAN: DHCP-PD and sending RA messages at the LAN
> interface too).
>
> Although my laptop got an IPv6 address, I realised that in order to access
> a web site using IPv6, access was blocked and there was a log message that
> the outgoing traffic at this specific site had been blocked at the LAN
> interface. So, I added an IPv6 rule at the LAN interface from "LAN net " ->
> any to allow IPv6 traffic and it worked!
>
> Weird, I thought because I had assumed that this was the case by default
> (to allow outgoing traffic) but no big deal.
>
> Next day, after shutting down and starting up again m0n0wall, I faced the
> same problem. Outgoing IPv6 traffic was blocked although my laptop had got
> a unicast IPv6 address, but the rule that I had added was still there too.
> I confirmed that there were similar logs that showed that the outgoing
> traffic was blocked. I "Edit" the rule, then I DID NOT change anything, I
> pressed "Save", "Apply", and it worked again.
>
> Has anyone else experienced similar problem? Am I missing sthg?
>
> Best
>
> Antonios
>

--089e0122fa24dc11ee0505b92288--