cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Newbie
566 Views
Message 1 of 3

IPv6 Pinholes and conflict with IPv4 Firewall on SmartHub

BT Broadband provides a globally routable IPv6 address for the LAN, and individually globally routable IPv6 addresses for the devices on your network (that support IPv6 at least). The important thing here is that it is globally routable.

There is a Firewall on the Smart Hub which prevents traffic from the WAN reaching the IPv6 Hosts on the LAN side of your router.

In the SmartHub Settings > Advanced > IPv6 you have the option to configure "Pinholes". The idea is that you create holes in the firewall for specific ports and specific host interfaces (which of course have a specific IPv6 address). Once this is done you should be able to route traffic from anywhere to the IPv6 address of your device on your LAN. This is what IPv6 is for after all.

But it doesn't work...

I have discovered that in order for the Pinholes to work you must also set the IPv4 firewall to "Disabled". 

This is a very bad idea, opening up your entire network to the hostile environment of the internet.

It seems there is a conflict between the IPv4 firewall and the pinhole configuration for IPv6, and that one is thwarted by the other.

Has anyone else seen this problem? Has anyone found a workaround that doesn't involve disabling the entire IPv4 firewall?

This seems like a really significant bug in the SmartHub, and something that should really be fixed. Otherwise, people will end up disabling their firewalls and all sorts of bad things will happen.

Does anyone from BT have a way of talking to the right people who might be able to get this fixed?

It is very frustrating, and I am considering buying an alternative router with some better management software on it, or better still that I can configure myself!

Any ideas greatly appreciated.

0 Ratings
Reply
2 REPLIES 2
Highlighted
Sage
543 Views
Message 2 of 3

Re: IPv6 Pinholes and conflict with IPv4 Firewall on SmartHub

Third party router is the way to go if you want advanced settings. ISP equipment is produced as "one size fits all". It never does though.

0 Ratings
Reply
Highlighted
Distinguished Sage
Distinguished Sage
525 Views
Message 3 of 3

Re: IPv6 Pinholes and conflict with IPv4 Firewall on SmartHub

Also bear in mind that BT in their infinite wisdom don't give you a static IPv6 prefix so your device addresses will be dynamic in any case. Rather defeats the point of pinholes I would have thought.

0 Ratings
Reply