Question about IPV6

[SStratman]

Hi I have an Asus RT-N66U with the latest release firmware from asus: 3.0.0.4.374_720. I currently have it set to run IPV6 natively (which is working just fine in my area through comcast)

My question is I came across a few posts on various forums about this router and the router firewall not actually being on/working when using IPV6 which immediately had me concerned!
Is this true, or is it only true when using IPV6 via one of tunneling types, or what?

If so is there anything I can do to get the external router firewall working just like it did/does with IPV4 that wouldn't disturb my network within it and my devices communicating to each other? As I use upnp as well as other network sharing programs

 

[Nerre]

Yes, there is a forum topic about it somewhere and I think Merlin has a page about it but I didn't find it with a quick search...

Edit: found it: http://www.lostrealm.ca/tower/node/81

But since you are not running Asuswrt-Merlin you will have to apply the rules manually. With Merlins software you can put the script in /jffs/scripts/firewall-start.

 

[Deleted member 22229]

I dont think Asus stock firmware has any firewall for v6 at all. You need to use a merlin build if you want a v6 firewall.

 

[RogerSC]

Yes, I'm using RMerlin's 374.32, and it has an IPv6 firewall built-in. Before RMerlin added the IPv6 firewall, I was using ip6tables firewall script in /jffs/scripts/firewall-start, but don't need to do that anymore.

And yes, if you use Asus stock firmware like 374_720, there is no IPv6 firewall built-in at all. You'll need to create your own using ip6tables and figure out how to have it start at router boot time. I'm personally not familiar with the startup scripts for Asus stock firmware, only for the ones that RMerlin has added in his firmware versions (as mentioned above).

But again, if you use RMerlin's 374.32, there is an IPv6 firewall built into that firmware version. So that's a good firmware version to try to get an IPv6 firewall for no work on your part.

 

[PrivateJoker]

I mentioned this site in an earlier post, and I'm sure there are others, but this is a nice basic IPV6 based port-scanner.

http://ipv6.chappell-family.com/ipv6tcptest/