[solved] Portforward to IPv6 localhost doesn't work as expected

Bob.Dig

I am portforwarding my WireGuard-port on my "WiFi" to 127.0.0.1, with pass. Reason is that I want my phone to believe that it is still connected to my public IP (which is not WAN-address), even while I am at home -> less WireGuard-friction.

When I tried the same with IPv6, portforwarding to ::1, the WireGuard tunnel failed after some seconds.
Took me some time to find that I can do it successfully towards the "WiFi"-address, which is fine too.

But why doesn't it work towards ::1, anyone has an idea?

JonathanLee

@Bob.Dig have you tried to use the Unique Local Address ULA for ipv6 for the firewall?

Bob.Dig

In the NAT dialog is this to find:

Enter the internal IP address of the server on which to map the ports. e.g.: 192.168.1.12 for IPv4
In case of IPv6 addresses, in must be from the same "scope",
i.e. it is not possible to redirect from link-local addresses scope (fe80:*) to local scope (::1)

For me it is ULA to localhost. That might be the reason, it is not working...

Gertjan

Might ?
You can be more formal then that.
Its stated :

@Bob.Dig said in Portforward to IPv6 localhost doesn't work as expected:

not possible

Try GUA ?

Bob.Dig

@Gertjan said in Portforward to IPv6 localhost doesn't work as expected:

Try GUA ?

You are trying to be funny.

I tried with ping on pfSene. I can ping 127.0.0.1 from any interface but ::1 can only be pinged from localhost.

So I guess, problem solved. It is working like expected, just not by me.
Now I hope I can remember till next time.