search

goalmarketing / vigor2130

Automatically exported from code.google.com/p/vigor2130
0 stars 0 forks source link

No default IPv6 firewall rule when using sixxs.net/AICCU #102

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
> What steps will reproduce the problem?
1. http://ipv6.chappell-family.com/ipv6tcptest/ shows open IPv6 ports

> What is the expected output? What do you see instead?
WAN to LAN connections should be rejected by default

> What version of the product are you using? On what operating system?
Firmware 1.5.3

> Please provide any additional information below.

The IPv6 firewall script in /lib/firewall6.sh contains this default rule:
        #default reject tcp/udp new connection from WAN                                      
       ip6tables -A FORWARD -i sit+ -m state --state NEW -j DROP 

There is no interface that matches 'sit+' when using an AICCU tunnel.
The following line works for an AICCU tunnel:
ip6tables -A FORWARD -i aiccu -m state --state NEW -j DROP

Original issue reported on code.google.com by f.penzko...@gmail.com on 13 Aug 2013 at 8:17