[Snap] Having trouble opening ports on IPv6 addresses

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › [Snap] Having trouble opening ports on IPv6 addresses

Aaroona

3196 posts

Uber Geek

#148707 28-Jun-2014 12:59

I'm able to open ports fine, using IPv4. That all works okay. The problem seems to come in when I tried to open a port and connect via IPv6.
My understanding is that there is no NAT with IPv6, so I wouldn't open the port via the router, I'd do it via the PC.

But I have the port open on the PC and can confirm its working in my LAN, but when I try an external port scanner, they are saying it's closed?

Anyone else having issues with this on Snap?

Just to confirm, this is opening a port for IPv6 INTERNET traffic.

Lorenceo

904 posts

Ultimate Geek

Trusted

#1075997 28-Jun-2014 13:12

Which router are you using?
On my TomatoUSB router there is IPv6 port forwarding. I've tried it and can confirm that it works.

Aaroona

3196 posts

Uber Geek

#1075998 28-Jun-2014 13:14

Lorenceo: Which router are you using?
On my TomatoUSB router there is IPv6 port forwarding. I've tried it and can confirm that it works.

I'm using OpenWRT on a WNDR3700.. My understanding of IPv6 could be completely flawed, which could be why I'm running into issues... Maybe less Snap! related then and more user ;)

Aaroona

3196 posts

Uber Geek

#1076002 28-Jun-2014 13:26

Looks like my understanding of IPv6 is slightly incorrect. or at least about my set up specifically.

I opened port 80 on on my router, but for all addresses in my LAN.. so now http://[2406:e000:e11e:0:6587:ce44:b0b8:7ce1] works fine. I need to do some more reading though, because while it "works", surely it's not secure. Because the way the rule is set up, it allows port :80 to all addresses in my LAN, when I only want it to go to one host??
But because the IPv6 address is only assigned when it connects to Snap!, I don't believe I can assign a static lease/static address to route to...

Lorenceo

904 posts

Ultimate Geek

Trusted

#1076025 28-Jun-2014 13:56

My router allows you to set which address you want to forward the port to.
You'll need to sort out static v6 addressing within your network. However since Snap don't have static v6 prefixes it leaves you stuck in a bit of a corner unfortunately.
One less than optimal solution could be to sign up for a he.net tunnel, since they give you a static prefix?

Edit: My router defaults to forwarding the port to all v6 addresses behind it too.

Aaroona

3196 posts

Uber Geek

#1076042 28-Jun-2014 14:08

Lorenceo: My router allows you to set which address you want to forward the port to.
You'll need to sort out static v6 addressing within your network. However since Snap don't have static v6 prefixes it leaves you stuck in a bit of a corner unfortunately.
One less than optimal solution could be to sign up for a he.net tunnel, since they give you a static prefix?

Edit: My router defaults to forwarding the port to all v6 addresses behind it too.

Hmm, so doesn't sound like I can fix it properly then, based on what you're saying, until Snap! provide static prefixes?
Average :( - not entirely important I guess since most places I connect in from don't actually use IPv6 internet yet, but hopefully Snap! sort out static prefixes soon. long live IPv4!!

Zeon

3916 posts

Uber Geek

Trusted

#1076084 28-Jun-2014 15:30

You shouldn't need NAT with IPv6 but if there is no static thats a bit annoying. It's all native so all you should need to do is open the firewall port and that's it.

Speedtest 2019-10-14

Aaroona

3196 posts

Uber Geek

#1076087 28-Jun-2014 15:41

Zeon: You shouldn't need NAT with IPv6 but if there is no static thats a bit annoying. It's all native so all you should need to do is open the firewall port and that's it.

Firewall port on the router you mean? Or on the appliance the service is hosted on?

It's a shame assigning a static IP is not similar to that in IPv4... At least then I could have DDNS running on my router and assign a static DHCP lease for my PC and do host RDP services.

now, I can't do that. Such a PITA.