Formatting IPv6 addresses for firewall rules?

[PuterCare 3]

Hi all,

I recently added the default rules to protect against ransomware but now some legit connections to Sharepoint in powershell are being blocked. I have found the list of IPs to set up in the firewall to fix this (https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide) but some IPv6 formats are not accepted by Eset e.g. 2620:1ec:d::10/128.

Is this as simple as /128 CIDR subnet is a single IP so I should just enter in 2620:1ec:d::10 and it will have the same effect? My IPv6 experience is poor..

Thanks

[itman 1,659]

3 hours ago, PuterCare said:

Is this as simple as /128 CIDR subnet is a single IP so I should just enter in 2620:1ec:d::10 and it will have the same effect?

Correct.

Also, the Eset firewall is "picky" about which CIDR is valid. For example, it will accept 2620:1ec:d::10/64 but not 2620:1ec:d::10/96.

Edited November 8, 2021 by itman

[PuterCare 3]

@itman to the rescue once again, thanks a lot 🙂