IPv6 connections not firewalled

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Connect to an IPv6-capable network
2. Connect to an IPv6-capable host (e.g. ipv6.google.com)
3. Connection succeeds regardless of Droidwall settings

Original issue reported on code.google.com by cx23...@gmail.com on 6 Mar 2011 at 8:31

[GoogleCodeExporter]

I believe that this is a limitation of how the kernel was compiled (without 
ipv6 support on netfilter).
I will investigate...

Original comment by rodrigo...@gmail.com on 6 Mar 2011 at 7:35

[GoogleCodeExporter]

Not that my comment will be of any additional use but I get the same problem. 
Actually I use wifi at home, which happens to provide ipv6 internet. Thought 
the app didn't work at all, until I switch back to 3G internet.

Hope you'll be able to fix it (maybe the Thalamus guy making custom kernel for 
HTC Desire may be of some help http://thalamus.ineige.org/kernels/2.6.35/)

Cheers ;)

Original comment by lgardent on 25 Apr 2011 at 10:12

[GoogleCodeExporter]

I was able to compile a good ip6tables binary for Android (finally!)
This is a first step toward supporting IPv6 firewall :)

Unfortunately, the kernel on my ROM does not support netfilter IPv6, so I 
cannot test it.

Can someone with IPv6 test the attached binary for me?
As root, do the following
Copy ip6tables somewhere on your phone (on /data/data/ for example)
chmod 777 ip6tables
./ip6tables -L -v

Please post the output here.
I got the following output, meaning that the kernel lacks IPv6 netfilter:

ip6tables v1.4.10: can't initialize ip6tables table `filter': Table does not 
exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

Thanks!!

Original comment by rodrigo...@gmail.com on 28 Apr 2011 at 2:10

Attachments:

• ip6tables

[GoogleCodeExporter]

I'm running Cyanogenmod 7.0.0 on a ZTE Blade:

# uname -a
Linux localhost 2.6.32.9-perf #1 PREEMPT Sat Apr 9 10:58:59 EDT 2011 armv6l 
GNU/Linux

# ./ip6tables -L -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source            destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source            destination         

Chain OUTPUT (policy ACCEPT 6 packets, 384 bytes)
 pkts bytes target     prot opt in     out     source            destination

# lsmod
ar6000 226429 0 - Live 0xbf03a000

# ls /proc/net
anycast6             ip_tables_matches    route
arp                  ip_tables_names      rpc
arp_tables_matches   ip_tables_targets    rt6_stats
arp_tables_names     ipt_hashlimit        rt_cache
arp_tables_targets   ipv6_route           snmp
connector            mcfilter6            snmp6
dev                  netfilter            sockstat
dev_mcast            netlink              sockstat6
dev_snmp6            netstat              softnet_stat
if_inet6             nf_conntrack         stat
igmp6                nf_conntrack_expect  tcp
ip6_flowlabel        packet               tcp6
ip6_tables_matches   pppol2tp             udp
ip6_tables_names     protocols            udp6
ip6_tables_targets   psched               udplite
ip6t_hashlimit       ptype                udplite6
ip_conntrack         raw                  unix
ip_conntrack_expect  raw6                 wireless

Hope that helps.

Original comment by cx23...@gmail.com on 30 Apr 2011 at 9:21

[GoogleCodeExporter]

Hi 

i've got a Samsung Galaxy Nexus. I did not install ip6tables, but it is 
allready there and works. 
If you need any output or anything else, let me know. Right now all IP6-traffic 
is not filtered.

Cheers M.

Original comment by monstert...@gmail.com on 25 Sep 2012 at 4:33

[GoogleCodeExporter]

Has this problem been sovled?
I test the ip6tables(submit by rodrigo...@gmail.com) on my oppo device,it 
doesn't work ,i got no promopt message.

Original comment by yunlaiy...@gmail.com on 3 Feb 2015 at 3:00