2018年11月30日 · Any other hop limit makes those ICMPv6 messages invalid and will be discarded Those ICMPv6 messages are NEEDED for IPv6 to work. PfSense running on Qotom mini PC i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.

2022年5月26日 · Is the article correct and those rules for particular types of ICMPv6 packets should be added to the WAN ruleset? I am pretty clueless about IPv6 - and only started looking at it now. Successfully running an IPv4 network at home and have a static IPv4 selfhosting a bunch of stuff, but like to move forward and learn about IPv6.

2021年1月18日 · ICMPv6 over the Internet is important for Path MTU Discovery (which uses the ICMPv6 Packet Too Big message) since ipv6 routers don't fragment packets. But I don't know if the web page tests that. I think they may be testing ICMPv6 echo request.

2018年9月11日 · That test just needs ICMPv6 Echo Requests to be passed. Any other critical ICMPv6 packets (which I personally don’t consider Ping to be among) are already allowed behind-the-scenes by pfSense. Allowing all ICMPv6 could actually pose a security threat because of some of its uses within a network as far as neighbor discovery and whatnot.

2020年7月9日 · Allowing ICMPv6 I was troubleshooting an IPv6 problem with a particular machine on my network today and ended up at ipv6-test.com . I got a 17/20 score at that site with a message indicating " Your router or firewall is filtering ICMPv6 messages sent to your computer.

2018年4月15日 · Still looking for where the ICMPv6 is being dropped. Firewall logs do show dumped ICMPv6 packets dumped, though the log doesn't tell too much (type etc). Guess I will have to get tcpdumps and look at them… Any more ideas would be helpful (e.g. were are the hidden rules visible) but I certainly thank you all for your help.

2019年1月21日 · HELP (Firewall) - Allow ICMPv6 for IPv6 Finally got IPv6 to work on Spectrum internet after hours of fighting. On the IPv6 test I get 18/20 with the only warning being that ICMP is being filtered.

2023年4月30日 · IMO that website is crap! It’s become slower and slower to load over the years while also giving inconsistent results AND it doesn’t actually test ICMPv6 anymore, it just says “Not tested” yet still gives that warning!

2012年6月22日 · IPv6 firewalls need to permit ICMPv6, type 2 (Packet Too Big) to work correctly with the public Internet. If you are implementing the IPv6 firewall for your web site, your enterprise, or other organization, please permit this specific ICMPv6 message, even if you by default block other types of ICMP.

2017年4月29日 · It can be a problem. IPv6 relies on something calling PMTUD (Path MTU Discovery) to work. Blocking ICMPv6 prevents PMTUD from working. Unfortunately, unblocking ICMPv6 has a downside. It can expose your devices to a certain kind of DoS attack (atomic fragment attack). This puts you in a "Damned if you do. Damned if you don't." situation.