Recent content by Erik Edwards

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. E

    IPv6 firewall fails to function.

    That results in (in the /tmp/filter...): -A FORWARD -m state --state NEW -p tcp -m tcp -s :: -d ::/::ffff:ffff:ffff:ffff --dport <port priv> -j ACCEPT Which results in (from ip6tables-save): -A FORWARD -s ::/128 -d ::/::ffff:ffff:ffff:ffff -p tcp -m state --state NEW -m tcp --dport <port...
  2. E

    IPv6 firewall fails to function.

    I found the error. No, its not in my rule. -A FORWARD -m state --state NEW -p tcp -m tcp -s ::/0 -d ::/0/::ffff:ffff:ffff:ffff --dport <port priv> -j ACCEPT from this rule: SSH-Alt ::/0 ::/0 <port priv> TCP
  3. E

    IPv6 firewall fails to function.

    Any thoughts on the missing rules?
  4. E

    IPv6 firewall fails to function.

    Here is the ip6tables -S output when the firewall is "off": -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -N NSFW -N PControls -N SSHBFP -N UPNP -N logaccept -N logdrop -A INPUT -i eth0 -p ipv6-crypt -j ACCEPT -A INPUT -i eth0 -p ipv6-auth -j ACCEPT -A INPUT -i eth0 -p udp -m udp --sport...
  5. E

    IPv6 firewall fails to function.

    Yeah, it should block everything, I understand that. What is broken is the processing of the permitted rules, they are _*completely*_ ignored.
  6. E

    IPv6 firewall fails to function.

    RT-AC56R 384.6 (latest for this model at time of posting) IPv6 firewall on/off switch seems to generate a complete blockage in the "on" position and had none of the rules entered in the GUI. In the "off" position it drops bad packets, but otherwise allows nearly everything through. Anyone have...
  7. E

    VPN help with ipv6

    I have run into the IPv6 firewall problem. The logic in the enable/disable seems to be 1/2 backwards. This causes the required rules to be skipped. ssh into the box and "ip6tables -S " and "ip6tables -S -t mangle" to see what the current set of rules are. I also had an issue with the VPN...
  8. E

    Asuswrt-Merlin 380.58 is now available

    AC56 in repeater mode isn't forwarding IPv6. Attempted to enter ipv6 address/gateway/firewall off via nvram without any success. Is there a guide available for this usage?
  9. E

    Asuswrt-Merlin 378.56_2 is now available

    When running httpd -s -p 8443 in the foreground I get a "Bus error" upon entering the VPN client page. This seems to be related to the contents of /jffs/openvpn/vpn_crt_client?_ca. Also, the CA extention (ca-bundle) need a much large character count. Comodo DCV (economy certs) chains are nearing...
Top