Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Alex Atkin UK]

Do you want me to enable ICMP on my firewall?

No clue to be honest, though I always keep it enabled personally.  Was hoping our resident IPv6 experts would weigh in.

[meritez]

No clue to be honest, though I always keep it enabled personally.  Was hoping our resident IPv6 experts would weigh in.

I shall await the IPv6 experts, this is my first forage into Public IPv6.

[Weaver]

In IPv6 you do really need to allow enough types + subtypes of ICMP to make sure that path MTU discovery works. The ICMP  "Fragmentation needed" and "Unreachable" packets should not be blocked. I can just about understand people blocking pings, but I don’t agree with it, and a lot of low end firewalls don’t have the specific filters to block subtypes of ICMP down to the level of "type" plus "code". That’s an annoying defect in my Firebrick - can’t specify filtering on subtypes of ICMP; it’s all or nothing. Blocking all ICMP types for "security" is just crazy; try asking such aficionados exactly what this achieves in terms of security. Note to self: check my own firewall rules before going on about anyone else.

[Alex Atkin UK]

Agreed, blocking ping was always kinda stupid as it was based on security by obscurity and just makes diagnosing issues harder.

[meritez]

How can I check if my public ipv6 is static?

[Weaver]

No idea. Are we talking about prefixes , recalling a situation such as Chrys had with a mad ISP where the prefix moved under certain conditions. Obviously, if you see it has moved then you know the extremely bad news. Ask your ISP? no one (else would be daft enough).

Are you an old hand with IPv6? - I should have first asked you.

I can recognise all the classes of an IPv6 address prefix, but what operating systems get up to isn’t immediately obvious sometimes.

With individual addresses on the other hand, there are some examples, such as EUI-64 addresses where the low-64 bits are MAC48-based are immediately obvious, and they are individually static. Of course you can make any address fixed yourself: it’s all down to your choices plus o/s behaviour.

[meritez]

It's so tempting to pair this with https://www.ebay.co.uk/itm/385093203487

I do not need

[LeeH]

I doubt that has stopped you before.

[meritez]

I doubt that has stopped you before.

For a device that supports passthrough of EE's IPv6 implementation, very tempting.

[LeeH]

150 on Amazon.

Still cannot get IPV6 to work on mine but I don't really know what I'm doing. 

[meritez]

150 on Amazon.

Still cannot get IPV6 to work on mine but I don't really know what I'm doing. 

how to get ipv6 working on the above SXT:
https://www.apalrd.net/posts/2022/network_lte/

Code: [Select]

/interface lte apn
add apn=everywhere ip-type=ipv4-ipv6 passthrough-interface=LTEWAN

Still do not need one

[LeeH]

I haven't got the a STX but thanks.

[meritez]

This would also work well:
https://www.ebay.co.uk/itm/284950116294

I do not need another one though

[Chrysalis]

No idea. Are we talking about prefixes , recalling a situation such as Chrys had with a mad ISP where the prefix moved under certain conditions. Obviously, if you see it has moved then you know the extremely bad news. Ask your ISP? no one (else would be daft enough).

Are you an old hand with IPv6? - I should have first asked you.

I can recognise all the classes of an IPv6 address prefix, but what operating systems get up to isn’t immediately obvious sometimes.

With individual addresses on the other hand, there are some examples, such as EUI-64 addresses where the low-64 bits are MAC48-based are immediately obvious, and they are individually static. Of course you can make any address fixed yourself: it’s all down to your choices plus o/s behaviour.

Yeah when I was a customer of sky they would change the prefix occasionally, I believe they use a sticky prefix configuration, so if you let the dhcp expire it changes, and it will also change if they reconfigure things.  I had the forced reconfiguration happening multiple times.

[meritez]

EE 5G Unlimited Data Sim - Preloaded each month from now until 8th JUNE 2024 - Works out around £10.99 per month - No Contract & One-off payment - Perfect for Wifi Routers, Tablets & Phones https://amzn.eu/d/h7c2VUB