Ysurac / openmptcprouter

OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
https://www.openmptcprouter.com/
GNU General Public License v3.0
1.81k stars 259 forks source link

IPv6 is bypassing OMR (due to my ISP) #1065

Closed kevin39 closed 3 years ago

kevin39 commented 4 years ago

Hi,

Expected Behavior

OMR used as ipv4 and ipv6 gw.

Current Behavior

ipv4 is working My ipv6 gateway is one of my ISP.

Possible Solution

Don't know

Steps to Reproduce the Problem

  1. I've 3 ISP
  2. DHCP disabled on all ISP routers
  3. One of my IPS is forcing DHCP ipv6 to ON. I can't disable it. So in my local, my computers are having a local ipv4 from OMR (and all is working fine) and the local ipv6 is emitted from on of my box because ipv6 is enabled and I can't disable it.

is there a way to bypass my ISP's router dhcp ipv6 to force everything via OMR ? Because some device like iPhone, I can't disable ipv6 so I lost any benefit from agregation because ipv6 is priorized :(

Specifications

kevin39 commented 4 years ago

Fixed. I blocked ipv6-forwarding through an EdgeRouter X, I'm using it as a switch and I connected this routr to a port with ipv6-forwarding disabled.

FYI, to block ipv6 on EdgeOS : CLI : interfaces ethernet eth2 ipv6 disable-forwarding Also available via their web gui (config tree -> interfaces -> ethX -> ipv6-forwarding)

github-actions[bot] commented 3 years ago

This issue is stale because it has been open 120 days with no activity. Remove stale label or comment or this will be closed in 5 days

bdaylik commented 5 months ago

Although it does not fix the actual issue, if you do not have a managed switch in between your ISP modem and your devices to prevent DHCPv6 traffic, you may at least prevent IPv6 AAAA records from showing up in unbound DNS responses.

Adding the following statement in OMR panel under Services -> Recursive DNS -> Files -> Edit: Server and saving and rebooting will remove any AAAA responses in DNS, thus would mostly block any ipv6 traffic:

private-address: ::/0

Note that this is a hacky solution and may cause some sites/services to be unreachable.