Jump to content

How to enable ICMP v6?


Recommended Posts

Hello,

In https://ipv6-test.com/  web site, I saw that there is a filtering for ICMPv6. How can I solve it in Eset Internet Security 15.0.21.0? (Windows 10 64bit)

This ICMP issue does not occur when I connect to Wi-Fi with my iphone.

Capture.JPG

Link to comment
Share on other sites

  • Administrators

ICMP (v6) is allowed only in the trusted zone by default:

image.png

We don't recommend changing these default settings.

Link to comment
Share on other sites

5 hours ago, cliff62 said:

In https://ipv6-test.com/  web site, I saw that there is a filtering for ICMPv6.

I have used this same web site on occasion to verify IPv6 connectivity. I also receive the same score as you along with same message about ICMPv6 filtering. Note the message states both "router and firewall" as possible sources.

Most routers also contain a firewall and are by default, filtering ICMPv6 traffic. As such, assume the source is the router's firewall and not the Eset firewall. I also believe the message displayed is bogus. If there were ICMPv6 issues, DHCPv6 resolution to allow IPv6 network traffic and the like would be failing.

Edited by itman
Link to comment
Share on other sites

There must be something wrong with Windows or Eset firewall. I don't know.

When my mobile phone (İphone) connects to Wi-Fi (Tp-link Archer C80),  there is no ICMP filtering problem (18/20 score)

Link to comment
Share on other sites

3 hours ago, cliff62 said:

There must be something wrong with Windows or Eset firewall

If you still believe EIS firewall is the issue, temporarily disable it. Verify in Windows Security Center that the Windows firewall is active; it should be.

Now go to the web site and observe if the score is the same and the ICMPv6 note appears. If it does, the Eset firewall is not the source of the issue. Finally, re-enable Eset firewall.

Edited by itman
Link to comment
Share on other sites

I disabled EIS firewall and made the ipv6 test again. (windows firewall didn't get active automatically)

Result is below.

???

Capture.JPG

Link to comment
Share on other sites

You have to permanently disable the Eset firewall; not just pause it, to activate the Windows firewall.

As such, I performed this procedure for you and below is the result. With the Windows firewall active, the IPv6 test results are the same as when the EIS firewall is active. Therefore, I conclude that it is my router's filtering of IPv6 network traffic that the web site finds issue with. And, I again state the web site output is bogus.

Eset_IPv6.thumb.png.8991a801ca404e434fcc910e47fbc2e9.png

 

Edited by itman
Link to comment
Share on other sites

Finally, this TP-lInk forum posting is most informative: https://community.tp-link.com/en/home/forum/topic/215396

When the router's IPv6 SPI Firewall is enabled and the https://ipv6-test.com/ test is performed, the ICMPv6 problem text is displayed. When the router's IPv6 SPI Firewall is disabled, the score is 19/20 with no ICMPv6 problem text displayed.

Bottom line - the router's firewall is blocking un-stateful ICMPv6 traffic as it should.

Edited by itman
Link to comment
Share on other sites

  • ESET Insiders
Posted (edited)

Are you actually having any connectivity issues or problems? Or just concerned with the results of this questionable test the site offers?

Edited by NewbyUser
Link to comment
Share on other sites

8 hours ago, itman said:

Finally, this TP-lInk forum posting is most informative: https://community.tp-link.com/en/home/forum/topic/215396

When the router's IPv6 SPI Firewall is enabled and the https://ipv6-test.com/ test is performed, the ICMPv6 problem text is displayed. When the router's IPv6 SPI Firewall is disabled, the score is 19/20 with no ICMPv6 problem text displayed.

Bottom line - the router's firewall is blocking un-stateful ICMPv6 traffic as it should.

Thank you

Link to comment
Share on other sites

  • Most Valued Members

Better to keep ICMP disabled or only enabled to Local Network, There is no need for opening ICMP and have your address pinged by bots if there is no need for it.

Unless you are offering some public service/server or something similar , other than that , it's better to keep it blocked.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...