IPv6 enabled, I can ping6 Internet from LANv6 but, can't connect anywhere (v6).



  • Hello!

    This is my first message to this forum, thank you guys so much for PFSense 2.1!

    Well, I have a SixxS account and 1 IPv6 /64 block routed to my IPv6 (WAN).

    I configured my tunnel within PFSense 2.1 following this doc: https://doc.pfsense.org/index.php/Using_IPv6_on_2.1_with_a_Tunnel_Broker

    What is working and what isn't?

    1- IPv6 Tunnel is UP - okay from PFsense, I can "ping6 google.com" and I can "telnet -6 google.com 80", no problem there;

    2- From my LANv6, I can "ping6 google.com" too! BUT, I can't "telnet -6 google.com 80" from my LANv6.

    What am I missing? Look:

    From my Linux client at LAN (behind pfsense 2.1):

    –- ping6 okay ---

    root@ubuntu:~# ping6 -c 1 google.com
    PING google.com(2800:3f0:4002:801::1002) 56 data bytes
    64 bytes from 2800:3f0:4002:801::1002: icmp_seq=1 ttl=54 time=62.8 ms

    --- google.com ping statistics ---
    1 packets transmitted, 1 received, 0% packet loss, time 0ms
    rtt min/avg/max/mdev = 62.875/62.875/62.875/0.000 ms

    --- telnet -6 not okay ---

    root@ubuntu:~# telnet -6 google.com 80
    Trying 2800:3f0:4002:801::1006...
    telnet: Unable to connect to remote host: Connection timed out


    Already double checked everything, apparently, PFSense is allowing ICMPv6 to reach the Internet but, I can't connect anywhere. My LAN interface "Firewall Rules" allow everything from its subnet, to reach the Internet but, the IPv6 rule(s) doesn't seems to have any effect.

    NOTE: SixxS tunnel is static, I have fixed IPv4 dedicated to this tunnel. I'm not using DHCPv6 on my LAN, just static IPv6 (I'm still testing).

    BTW, I know my tunnel is working without any problem, my previous IPv6 router was a vanila-Ubuntu 13.10 with the package aiccu installed and it was working (WAN and LAN v6) smoothly but, with PFSense 2.1, I'm unable to put it to work.

    Under "Status -> Gateways", both IPv4 and IPv6 (tunneled) are green.

    Any tips?!

    NOTE: Sorry about my ugly English, I'm a Portuguese speaker...

    Tks!
    Thiago



  • It is working now! My mistake…

    It was my ip6tables on Ubuntu box that was blocking IPv6 connections... I was playing with it last week and forgot about some rules there...

    Sorry about the buzz...

    IPv6 is working smoothly now through PFSense 2.1! Time to disable IPv4 and kiss NAT a goodbye...    ;)

    Long life for this awesome project!! Now IPv6 will fly!    :P

    Tks!
    Thiago


Log in to reply