Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 on Windows => Topic started by: mstahl on March 06, 2013, 11:01:49 AM

Title: Windows 7 SP1 / HE Tunnel / Firewall
Post by: mstahl on March 06, 2013, 11:01:49 AM
Hello, everyone. I've created an ipv6 tunnel and can ping and browse ipv6 enabled sites.
I was curious an ran an ipv6 port scan (http://ipv6.chappell-family.com/ipv6tcptest/) with my firewall disabled and i can't ping or rdp my v6 address.

If i create the tunnel on a ubuntu box all ports are exposed to the net. Is it possible v6 tunnels under windows are firewalled by default ?
Title: Re: Windows 7 SP1 / HE Tunnel / Firewall
Post by: cholzhauer on March 06, 2013, 11:47:48 AM
I think you're comparing apples and oranges here.  RDP is disabled by default on Windows, so unless you explicitly enable it, the firewall won't be involved because the service isn't running.

Also, the last I knew, ping was also separate from most firewall settings (this may have changed)

Is there any chance your Win7 station is behind a router or cable modem that's also doing firewalling?
Title: Re: Windows 7 SP1 / HE Tunnel / Firewall
Post by: mstahl on March 06, 2013, 12:23:06 PM
QuoteI think you're comparing apples and oranges here.  RDP is disabled by default on Windows, so unless you explicitly enable it, the firewall won't be involved because the service isn't running.
It's enabled.

QuoteIs there any chance your Win7 station is behind a router or cable modem that's also doing firewalling?
I'm behind a nat ipv4 router. However, i've just brought the tunnel up un my ubuntu box and et voila, ssh open and it replys to ping.

Title: Re: Windows 7 SP1 / HE Tunnel / Firewall
Post by: mstahl on March 07, 2013, 10:00:31 AM
I did some further testing today. I've set up a windows 8 vm, pasted the netsh commands and the rdp port was accessible immediately.
On my windows 7 machine however i was not able to expose the service to the net, without completely disabling the firewall.
Icmp6 needs to be opened explicitly on both windows 7 and 8.

I suspect microsoft has changed some stuff regarding fire walling ipv6 in windows 8. I will also try a fresh installation of windows 7 rtm sp1
to rule out possible misconfigurations on my production machine.

Can anyone test and confirm or deny this ?