Project

General

Profile

Actions

Bug #2843

closed

Easy Rule: Pass failed for IPv6

Added by Thomas Rieschl about 11 years ago. Updated about 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
02/26/2013
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.1-IPv6
Affected Architecture:

Description

When trying to create an "Easy Rule: Pass" within the Firewall logs the pass rule is created but the subnet is wrong. The rule is created as network with a 32 bit subnet instead of single host wirh /128 subnet.
I think it failes to determine that the IP address is IPv6 and therefore uses the /32 subnet from IPv4. The blocked packet was a ping (ICMPv6):
https://pia/easyrule.php?action=pass&int=sixxs&proto=icmpv6&src=[2001:xxxx:xxxx:xxxx::1]&dst=[2001:xxxx:xxxx:xxxx::2]&dstport=&ipproto=inet6

Seems that bug #2649 wasn't resolved correctly.
I'm using 2.1 from Feb 23, gitsync'd yesterday.

Actions

Also available in: Atom PDF