IPv6 Firewall rules - TL-R605 v1 1.1.1
Starting to play around with IPv6 and it all works so fare very well... although I'm curious if I can find somewhere in the controller settings to adjust/manage firewall rules for IPv6.
Currently ports and services are exposed to the Internet via IPv6, of course I can do host based firewalls, but preferably do it on the router for the whole LAN.
To decrease the attack surface, I currently disabled IPv6 and enable it only when I play around with it.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Fae Noticed that for the R605 v2 firmware is released with IPv6 ACL support (https://community.tp-link.com/en/business/forum/topic/614604), any words on the R605 v1?
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
You are absolutely right. But what can we do? TP-link wants to continue its legacy of not updating its devices as per the current market standards. Not only that, I see that they don't even bother to reply to it's customers on this platform. I am not sure what else to expect from them.
Wondering what will happen to TP-link if all of its user base ditch their product and move to its competitors. Guess that's when they will start making some progress and value their customers.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@paderijk The link is dead.
I've got the latest firmware and still not IPV6 ACL FW :-(
I've got a V2 firmware 2.1.2 Build 20230210 Rel.62992
- Copy Link
- Report Inappropriate Content
@paderijk and others
Thanks for pursuing TP-Link on this fundamental requirement.
FYI, it would appear that TP-Link are NOT even following RFC-6092 (Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service, JANUARY 2011) with their IPV6 implementation in the ER-605 "Business Class" Router!
Perhaps @Fae would like to confirm that the TP-Link development team have read the pertinent RFC?
I have also had to switch off my IPv6 connection until I'm sure it is secure :-(
regards
- Copy Link
- Report Inappropriate Content
I've installed the 2.2.0 FW for ER605v2 and implemented IPV6 ACLs. All ports are now in stealth mode, some of which are open earlier.
- Copy Link
- Report Inappropriate Content
Thanks for the reply but that version of the Firmware is NOT available on the TP-Link Download page
The latest version available is ER605(UN)_V2_2.1.2 Build 20230210, dated 23rd Feb and that is what is currently loaded on my device.
Can I ask where you found version 2.2? Is it a Beta version?
- Copy Link
- Report Inappropriate Content
Information
Helpful: 29
Views: 20764
Replies: 84