Selective Firewall

GreenLlama · 2021-02-15T14:54:28+00:00

Sunrise community - customers help other customers with topics related to television, Internet, telephone and mobile. Register now!

GreenLlama

I would like to connect to one of my devices from the internet at large.
Is there a way to allow for firewall exceptions to a particular ipv6 local address?
The only option I see on my connect box is to disable the whole thing.
Is this only realisable with ipv4 configuration with port forwarding at the moment?
Thanks for any info.

GreenLlama

I think the option I was looking for is the IP and Port filtering pane under security.
using the enabled option on incoming communications.

Daniele_Sunrise

GreenLlama Welcome to the Community!

We have made the changeover, which will be completed in 30 minutes. Restart your modem afterwards. If you have problems, reset your modem. Press the reset button on the back of the modem with a pointed object for at least 25 seconds. Then please try again.

Greetings
Daniele

pato

Yes, but I suggest to switch to IPv4. The quickest way to do this, is to call UPC support and ask them to switch. Alternatively send a private message including your account number, birthday and address to @Sunrise_Team with the request to switch to IPv4.

GreenLlama

Ok… I didn’t ask you to change it so I’m a little annoyed you just did it without my permission.
What’s the advantage of doing things with ipv4?
It seems to me that setting ipv6 ip filters allows me to have same port access on several machines, while on ipv4 I would have to setup proxies everywhere if I just use port forwarding.
Could you clarify?

edit: The port forwarding solution does seem to work for me, I would just like to understand the difference.

Daniele_Sunrise

GreenLlama Please excuse the quick switch to IPv4 without your explicit OK. This was my mistake.

Regarding differences you can find a good explanation here. (Page must be translated to english via browser)

Greetings
Daniele

GreenLlama

Daniele_Sunrise No worries, it just took my friend by surprise as he was working.
I’ll check out the link then thanks!

pato

As a quick recap, IPv4 is the older IP addressing standard, while IPv6 is newer. Currently all clients in the internet have an IPv4 address and thus can access other services offered with (public) IPv4 addresses. IPv6 is finally on the rise, but it runs parallel to IPv4 and is incompatible.
UPC offers either IPv6 DS-lite (which means you will have a public IPv6 address, but not have a public IPv4 address and can’t offer services to IPv4 clients), or “IPv4 only”, which means you can offer your services to all clients in the internet.
So if you want to host some services, it’s usually advisable to switch to IPv4 with UPC. The best solution would be a full dual-stack solution, but UPC isn’t sadly offering this for private customers.