when i tried to setup the ipv6, i got the following messages:
Error: Your IPv4 endpoint is unreachable or unstable. Please make sure ICMP is not blocked. If you are blocking ICMP, please allow 66.220.2.74 through your firewall.
my computer is using NAT behind a ADSL router, the endpoint IPv4 is the ip address of the ADSL router. now comes the simple (i guess it's very noob) question:
how do i unblock the ICMP? i suppose i have to do something on the ADSL router rather than on my computer, right? can someone please explain this a little bit in detail to me?
thanks and best regards
JJ
Quote from: tjj70302 on March 18, 2010, 08:09:02 PM
how do i unblock the ICMP? i suppose i have to do something on the ADSL router rather than on my computer, right? can someone please explain this a little bit in detail to me?
Correct, but how and even
if this is possible, depends on exactly which ADSL-modem / router you are using
Is there some sort of wireless router behind your DSL modem? If so, you'll need to make the change there.
my ADSL router is also the ADSL modem, and also the wireless router, the model is SMC, SMCWBR14S-N2.
after i login as admin, i see the menu like: SYSTEM, WAN, LAN, WIRELESS, NAT, ROUTING, FIREWALL, UPnP, DDNS, TOOLS, and STATUS. my best guess is the tweaking should be done in either ROUTING and/or FIREWALL. if you guys could shed some lights that would be great.
under the ROUTING menu, i got three sub-menus as Static Route, RIP, and Routing Table.
under the FIREWALL menu, i got six sub-menus as Access Control, MAC filter, URL blocking, Schedule Rule, intrusion Detection, and DMZ.
which one should i dive into?
Quote from: tjj70302 on March 19, 2010, 06:37:37 AM
my best guess is the tweaking should be done in either ROUTING and/or FIREWALL.
Or maybe WAN, just take a look at the different config options and look for "icmp" and/or "ping". I have worked with some SMC models before and they where not blocking ICMP by default.
What is your ISP? Maybe use Google to search if your ISP is blocking ICMP.
Here's a link to your manual.
www.smc.com/files/AN/MN_SMCWBR14-N2.pdf
On page 51, it shows you how to "Enable WAN Ping Respond"
EDIT:
Hmm, I'm not sure your screen looks like that...for some reason, google ignored the "S" in the model number
EDIT #2:
Here's a link to the proper manual (I think)
http://www.smc.com/files/AC/MN_SMCWBR14S-N2.pdf
Check out page 4-56
it works now! many thanks to cholzhauer.
in fact, my router originally had no problem creating a tunnel, i guess this new setting must have come with the new firmware i upgraded several weeks ago.
It's been awhile since this thread was active, but the following may still be useful for those running into this problem.
On some Linksys/Cisco routers (and probably other brands as well), the option to unblock ICMP falls under "Filter Anonymous Internet Requests"
You need to uncheck this option in order to enable the ping response. If you can't find an obvious ping enable/disable, your router may hide the option under a label similar to the one I describe in the above paragraph.
for those not wanting to enable ICMP entirely and have tomato firmware (probably WRT as well) you can just add a firewall script:
Administration -> Scripts -> click Firewall and add the following line:
iptables -A INPUT -j ACCEPT -s 66.220.2.74 -p icmp
click save, router will reboot and you should now be able to have HE reach your computer.
I have a wireless connect throughout the house, and have connected the xbox to the router and ran the test, icmp error, so to figure out if it was the router (linksys wrt54g v.2) or cable modem i connected to the modem directly and received the same error, so im positive its the modem giving me the problems. Should i get a new modem, or connect my internet provider?
Quote from: tjj70302 on March 18, 2010, 08:09:02 PM
when i tried to setup the ipv6, i got the following messages:
Error: Your IPv4 endpoint is unreachable or unstable. Please make sure ICMP is not blocked. If you are blocking ICMP, please allow 66.220.2.74 through your firewall.
my computer is using NAT behind a ADSL router, the endpoint IPv4 is the ip address of the ADSL router. now comes the simple (i guess it's very noob) question:
how do i unblock the ICMP? i suppose i have to do something on the ADSL router rather than on my computer, right? can someone please explain this a little bit in detail to me?
thanks and best regards
JJ
Hi;
when i try to create my tunnel in linux i have this message "IP is not ICMP pingable. Please make sure ICMP is not blocked. If you are blocking ICMP, please allow 66.220.2.74 through your firewall"
i stooped the firewall with these commands
# iptables -P INPUT ACCEPT
# iptables -P OUTPUT ACCEPT
# iptables -P FORWARD ACCEPT
# iptables -F
but i have the same error
Also when i do the tunnel in Windowx XP SP3 i have a problem when i try to test the ping6 so the is not working
please help me
Thank so much for you.
Does turning off the firewall completely fix your issue?
apparently not
what are you using for a router? Is your ISP blocking it?
In the first i want to try the tunnel configuration on my machine (linux and windows) and after I use it on a router connected to the internet (ipv4 network) to achieve ipv6 connectivity with another router connected to the internet via an ADSL connection
Right...but your connection is coming from somewhere...either a Cable Modem or ADSL modem to a firewall/router.
my connection via wifi and when I'm home I use the modem
Hello -
I am having the same issue. I'm running a MAC OS7 wirelessly off a Dlink 615 router wired through ATTs Motorola NVG510 using Firefox 16.0.2 and OpenDNS. As far as I can tell, i've unblocked the firewall and changed the default setting in Firefox to enable IPv6.
Please, if you would, enlighten me to what I am missing. Thank you.
I too use a DLink DIR-615. However, you do have to configure it to receive pings, but once configured, it's not the problem. Note that it may have a factory default of NOT responding to pings.
Thank you. I have tried this ->
Section - Configuration Advanced Network Settings UPnP: To use the Universal Plug and Play (UPnP™) feature click on the checkbox to enable. UPNP provides compatibility with networking equipment, software and peripherals. WAN Ping: Unchecking the box will not allow the DIR-615 to respond to pings.
I have also unblocked pings on my security settings on my MAC
and still cannot pass the tunnel to move on past 'newbie' :-[
uPNP != ICMP
On my 615:
Advanced > Advanced Network > Respond to WAN pings
Quote from: cholzhauer on May 25, 2012, 05:50:46 AM
what are you using for a router? Is your ISP blocking it?
Hi, is there any way to using HE IPV6 tunnel when the ISP blocking the ICMP packets.
In addition, it is not required for the tunnel server checking the client ip reachable when setting up a tunnel.
To setup the HE service, you need to have an endpoint that responds to icmp.
Quote from: sangeshitou on December 07, 2013, 07:02:58 PMHi, is there any way to using HE IPV6 tunnel when the ISP blocking the ICMP packets.
The best you can do is to email HE directly and explain your situation and ask if you can get that requirement removed from your tunnel. There is no technical reason for the ICMP check to exist in the first place. Other providers of 6in4 tunnels do not perform this sort of check. I have come across multiple networks, where I can use 6in4 with any other provider than HE for this exact reason. Unfortunately the other providers can't deliver as good a service as HE in other areas.
Before you contact HE about it, you could try another 6in4 provider, just so you know for sure that it is indeed possible to use 6in4 from your connection. The provider with the least bureaucracy is NetAssist (http://tb.netassist.ua/), just type in an email address and you are good to go. Unfortunately they only have one PoP and not very reliable service. I have successfully used a NetAssist tunnel from networks, that does not work with HE.
It's my understanding that the pings only happen when there are periods of no activity on the tunnel - and that's only to verify that the tunnel endpoint is still there.
There were/are 2 pings.
The first one is to verify that the remote side is up and reachable, otherwise you don't get to create a tunnel. A side effect is that it punishes those stuck behind ISPs who think blocking ICMP is proper security, when really it is rate-limiting ICMP that is important. Those users can use another service less restrictive on mandatory ICMP replies to create a tunnel, that might have different forms of restrictions or one that doesn't have as many POP locations.
The second ping should be over the tunnel itself to the Client Side IPv6 Address, to see if the tunnel is still up. Also to update the lowest latency tunnel graphs: http://www.tunnelbroker.net/usage/tunnels_by_latency.php
Also if you are on AT&T uverse, don't you already get a "native" tunnel via 6rd?