OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • IPV6 being blocked?
« previous next »
  • Print
Pages: [1]

Author Topic: IPV6 being blocked?  (Read 1144 times)

cguilford

  • Full Member
  • ***
  • Posts: 126
  • Karma: 14
    • View Profile
IPV6 being blocked?
« on: October 25, 2018, 08:24:06 pm »
I'm getting the following in my Firewall Logs...
   lan      Oct 25 14:18:44   [fe80::6c3a:297e:xxxx:xxxx]:51968   [2001:470:1:18::125]:80   TCP   Default deny rule   

My Lan rules are all Defaulted to normal for IPV6
IPv6 *    LAN net    *    *    *    *       Default allow LAN IPv6 to any rule


I'm confused as to why it is blocking IPV6 on the Lan?

I'm running 18.7.6 so freshly upgraded.  I had IPV6 turned off on the Lan before because it would stop working after a few days and would have to always wind up rebooting everything to get it to clear up, I figured I would try it after the upgrade and I'm seeing this, I've rebooted the firewall as well as the box I'm trying to connect to.
« Last Edit: October 25, 2018, 08:57:12 pm by cguilford »
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10507
  • Karma: 833
    • View Profile
Re: IPV6 being blocked?
« Reply #1 on: October 26, 2018, 07:42:06 am »
State tracking drops this traffic because it has not seem the start of the TCP connection. That's where the default rule starts blocking. :)


Cheers,
Franco
Logged

cguilford

  • Full Member
  • ***
  • Posts: 126
  • Karma: 14
    • View Profile
Re: IPV6 being blocked?
« Reply #2 on: October 26, 2018, 01:37:03 pm »
How do I resolve this issue?  Seem to be getting alot more of these?

lan      Oct 26 07:35:38   [fe80::22df:b9ff:xxxx:xxx]:52910   [2001:4860:4860::6464]:53   UDP   Default deny rule   
   
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10507
  • Karma: 833
    • View Profile
Re: IPV6 being blocked?
« Reply #3 on: October 29, 2018, 08:16:20 am »
If you see it as a firewall issue instead of a client issue with potential security implications -- the client copes with this anyway -- you can disable state tracking in your default IPv6 pass rules under advanced.


Cheers,
Franco
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • IPV6 being blocked?
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2021 All rights reserved
  • SMF 2.0.18 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2