= Сообщение: 6814 из 7402 ============================================= IPV6 = От : Michiel van der Vlist 2:280/5555 11 Oct 21 23:45:48 Кому : Tommi Koivula 11 Oct 21 23:45:48 Тема : UFW and he.net FGHI : area://IPV6?msgid=2:280/5555+6164b1a0 На : area://IPV6?msgid=2:280/5555+61648303 = Кодировка сообщения определена как: CP850 ================================== ============================================================================== Hello Tommi,
Monday October 11 2021 20:29, I wrote to you:
MV> That outgoing IPv6 works does not automatically imply that it is open MV> for unsollicited incoming protocol 41 packets.
This is what I wrote 10 years ago in my Fidonews article titled "A second life for the linksys Part 1"
=== quote ===
If you get this result your tunnel is working. To enable incoming pings however you need to open the firewall for protocol 41. Protocol 41 is the protocol used for 6in4 tunneling. The firewall of openwrt is closed for all unsollicited incoming packets by default. Bij pinging out over IPv6, the firewall is opened for protocol 41, and it can be pinged from outside, but it closes again after a minute or two. Add the following lines to /etc/config/firewall to keep the tunnel open permanently:
[code]
# Accept proto 41 so it always reaches the tunnel endpoint
config rule option src wan option proto 41 option target ACCEPT [/code]
