BUG: IPv6 and WebFilter

RE: BUG: IPv6 and WebFilter

IanMorehouse — Tue, 23 Feb 2016 02:57:26 GMT

Fixed my IPv6 problem for the moment. Stability has returned. I haven't restarted the UTM since moving the VM to another case. I have the proxy in transparent mode, so the external IPv6 address is provided to end devices.

RE: BUG: IPv6 and WebFilter

IanMorehouse — Wed, 17 Feb 2016 07:14:03 GMT

I have turned off IPV6 and the web proxy and the UTM internet connection is not stable. Works for a couple of minutes then dies. No errors, just no connection.

I suspect I will have to revert to previous version until the next 9.4b is released.

RE: BUG: IPv6 and WebFilter

BLS — Mon, 15 Feb 2016 04:15:01 GMT

You're welcome - if you need me to test anything let me know.

RE: BUG: IPv6 and WebFilter

HolgerLehn — Fri, 12 Feb 2016 11:24:55 GMT

hi xnsys,

we will have a look for the behaviour you reported. Thank you for sharing your experience. We will come back as soon as we have more informations.

Greetings
Holger

RE: BUG: IPv6 and WebFilter

BLS — Thu, 11 Feb 2016 15:33:06 GMT

Now this gets a little more interesting, I had "Enable Pharming protection" within the web-filter enabled, with this enabled I get the following fall-back results

Disable the "Enable Pharming protection" and I get no fallback: -

Again, disable the web-filter and this is the results: -

So it would appear that the web-filter is not 100% compatible with the functional requirements of IPv6.

RE: BUG: IPv6 and WebFilter

BLS — Thu, 11 Feb 2016 15:22:48 GMT

I've just had a 7 second fall back, and now it's not working again.

Disable the web-filter and it's always <1 second, which is what I would expect to see with the web-filter on.

There's going to be some fun times ahead while the world migrates to IPv6 - at least being early adopters we can help iron out the bugs, if they are willing to listen :)

RE: BUG: IPv6 and WebFilter

Ben — Thu, 11 Feb 2016 15:14:49 GMT

i got 14 seconds Fallback time with web protection enabled over ipv6

RE: BUG: IPv6 and WebFilter

BLS — Thu, 11 Feb 2016 14:02:56 GMT

Under further investigation, it appears that the web filter is not allowing fallback to IPv4.

With the web filter off, there is no problem accessing the site, and the results are as follows: -

Turn the web filter on and the results are almost constantly as this picture: -

Occasionally the web filter will allow fallback to IPv6, but not often.

RE: BUG: IPv6 and WebFilter

BLS — Thu, 11 Feb 2016 07:08:18 GMT

Just to add, if I clear the DNS cache then things start working again as they should