Hello folks.
I wanted to ask something specific regarding PCP, IPv6 and incoming
traffic to clients.
If I remember well, a long time ago when full IPv6 support was being
added to OpenWrt there was a hot discussion if the default firewall
rules for IPv6 should allow any incoming connections to LAN clients or
if they should block and the exceptions should be made manually.
Fortunately, in my view, the decision was to block by default and that's
how it is know, if I don't miss anything.
But there are cases when incoming connections to LAN clients in IPv6 are
necessary and most of the time they don't have admin access to the CPE.
Reading some RFCs like 6888 it talks about PCP (RFC 6887 -
https://tools.ietf.org/html/rfc6887) which disciplines exactly this I am
talking about on its abstract.
This is also mentioned in RFC 7368 Section 3.6.1
(https://tools.ietf.org/html/rfc7368#section-3.6.1)
Then looking at the miniupnpd package details
(https://openwrt.org/packages/pkgdata/miniupnpd) it mentions it has a
PCP daemon.
Question is: Is it fully implemented including support for IPv6 ? So if
a modern Operating System makes a request to a CPE which runs this PCP
Daemon it will be able to add the necessary iptables FORWARD rule to
allow an incoming connection to that client which requires it ?
Thanks
Regards
Fernando
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
