Does the router firewall work when ipv6 is enabled? My isp is offering ipv6 but I do not want to enable it if the firewall on the router is disabled. Sorry for the noob question.
Information implies that it does not when you toggle it on in Settings.
“When IPv6 is enabled, WAN interfaces such as Ethernet will get their IPv6 addresses via DHCPv6. You can also modify the IPv6 address manually in the Ethernet settings page. Some features (Firewall, VPN, GoodCloud) do not yet support IPv6.
Note: If you use functions of both VPN and IPv6 at the same time, it's likely to cause IPv6 data leakage.”
Firewall also works/enable when the IPv6 enabled, but:
This info means that in the v4.7 and older firmware, the firewall supports IPv4 only, it can manage traffic packets of IPv4, and does not support IPv6 for the time being.
The v4.8.0 and later firmware, the VPN already supported IPv6. VPN (including both client and server) and IPv6 are enabled, so it will not cause IPv6 data leakage.
1 Like
Im not interested in VPN, I have a basic network with no access required from the outside world into my own network apart from the Internet of course. So firewall is enabled on latest firmware for dual stack environment? MT6000 only implement stable 4.7.7 firmware so firewall does not block unwanted traffic (not secure) on ipv6?
Okay, I see, the IPv4 and IPv6 dual stack firewalls are supported in v4.x firmware, that is including v4.7 and v4.8.
In the firewall, the actual IPv6 is the same as IPv4, which blocks some unnecessary traffic IPv6 data from WAN -> LAN unless the rules are manually configured (allow, deny, or drop, etc.) in Luci.
Thus the LAN IPv6 clients are safe.
So I do not need to configure anything in Firewall for ipv6 on 4.7.* firmware if ipv6 is enabled?
Yep, enabled IPv6 did not require to configure anything in Firewall, it is safe enough by default configuration.