faern
commented
1 year ago What IPv6 range/IP are you using in your LAN (to access your NAS)? When you enable "Local network sharing" we unlock the following IPv6 ranges in the firewall: fe80::/10, fc00::/7, plus a bunch of multicast network ranges. Any other range is expected to travel through the tunnel, and is therefore blocked outside the tunnel.
Enable IPv6 is not related to this. Enable IPv6 enables IPv6 on the tunnel interface, and as a result allows IPv6 traffic in the VPN tunnel.
This is on (X)ubuntu 22.04 with Mullvad client 2023.3. I'm currently experimenting with different settings.
When using "Local Network Sharing" I can indeed reach my NAS and other devices by their IPv4 addresses (private range, something like 10.0.0.10) but not by their IPv6 addresses (a ping will result in "Destination unreachable: Port unreachable"). Disconnecting the VPN resolves the issue - but then why bother with it at all?
Am I doing something wrong, or did Mullvad forget to allow for local IPv6 connections?
Perhaps relevant:
The problem seems independent from the setting "Enable IPv6", in other words, that one does not seem to make any difference except for outbound traffic.
I'm using my router address (say, 10.0.0.1) as Custom DNS Server in Mullvad in order to be able to resolve names in the local network.
Thank you!