How do I allow a device in IPv6 Firewall?

Is it possible to disable the IPv6 firewall for one specific device. Also how do I completely disable IPv6 firewall if I want?

What is not working?
What exactly do you want to allow?

I want to allow port 80 and some other ports.

Port forwarding to a dynamic IPv6 address - #2 by vgaetera

2 Likes

Its actually Synology NAS server, port 80 and port 5000 needs to be forwarded, and there some other ports thats needs SMB protocol, so I just want to allow the whole device to open all ports for Synology NAS.

Is this the file I need to modify? /etc/config/firewall

Instead of the above rule can I add

option macaddr '78:a3:51:44:d0:22'
or
option src_mac 00:00:00:00:00:100:

because HOST_IPV6_ADDR keeps changing as it is dynamic.

https://openwrt.org/docs/guide-user/base-system/dhcp_configuration#static_leases

So what file do I need to edit? I mean where do I copy and paste the code above.

uci add firewall forwarding
uci set firewall.@forwarding[-1].src="wan"
uci set firewall.@forwarding[-1].dest="lan"
uci set firewall.@forwarding[-1].family="ipv6"
uci commit firewall
service firewall restart

Connect to your router via SSH and copy-paste those commands directly into the terminal.

Thanks I ll try it, is there any command to reset it just in case if I screw up, I want to play with different ports, just in case.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.