Netgate SG-1000 microFirewall

Author Topic: IPV6 bug Google Play Store gets blocked by default due to default IPV6 rules.  (Read 3158 times)

0 Members and 1 Guest are viewing this topic.

Offline TheRiceKing

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
My new Android Galaxy S7 could not connect to Google store. pfSense blocks all IPV6 by default. My Android communicates to Google Play Store via IPV6 for some reason.

The most confusing of all was that the option to disable blocking IPV6 was on by default and the description to disable it was very confusing.

On the left it says allow IPV6 (was checked by default) however next to it it also says "All IPV6 traffic is blocked by the firewall unless this box is checked."

Do you see how confusing that is?

Unchecking = Does not block IPV6 traffic

Checked = Blocks IPV6 traffic

So why the description says: "All IPV6 traffic is blocked by the firewall unless this box is checked" ?

The description is saying that when the option is checked IPV6 is not blocked but that is incorrect because the function is the complete opposite.


« Last Edit: April 24, 2016, 12:51:45 am by cmb »
ZBOX CI323 nano (Dual NIC)

Intel N3150 Quad-Core 1.6GHz, up to 2.08GHz

16GB DDR3 256SSD

Offline chpalmer

  • Hero Member
  • *****
  • Posts: 1790
  • Karma: +93/-3
    • View Profile
    • Home of Cablenut

On the left it says allow IPV6 (was checked by default) however next to it it also says "All IPV6 traffic is blocked by the firewall unless this box is checked."

Do you see how confusing that is?

Unchecking = Does not block IPV6 traffic

Checked = Blocks IPV6 traffic


Actually I and many others here have IPv6 running just fine with the box checked. Im not sure why your having problems but you might consider opening a thread for help here-   https://forum.pfsense.org/index.php?board=52.0       

When you uncheck the box do you clear states?  Id even reboot the box myself just to make sure.

Not confusing at all.   The title of the box says it all.   "Allow IPv6 Traffic" .    The description after could be worded different maybe but explaining the consequence of having the box unchecked seems appropriate to me.
P.S. statements made by me are not necessarily condoned by the management of this fine organization.  http://badmodems.com

Offline TheRiceKing

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile


Actually I and many others here have IPv6 running just fine with the box checked. Im not sure why your having problems but you might consider opening a thread for help here-   https://forum.pfsense.org/index.php?board=52.0       

When you uncheck the box do you clear states?  Id even reboot the box myself just to make sure.

Not confusing at all.   The title of the box says it all.   "Allow IPv6 Traffic" .    The description after could be worded different maybe but explaining the consequence of having the box unchecked seems appropriate to me.
[/quote]

Hello and thank you for your reply.

Please read the screenshot again carefully. It should say "... unless is unchecked" and not "Unless is checked"

ZBOX CI323 nano (Dual NIC)

Intel N3150 Quad-Core 1.6GHz, up to 2.08GHz

16GB DDR3 256SSD

Offline chpalmer

  • Hero Member
  • *****
  • Posts: 1790
  • Karma: +93/-3
    • View Profile
    • Home of Cablenut
Hello and thank you for your reply.

Please read the screenshot again carefully. It should say "... unless is unchecked" and not "Unless is checked"

Quote
All IPv6 traffic will be blocked by the firewall unless this box is checked

But your statement would be untrue.  The box has to be checked to pass IPv6 traffic.   If your seeing something else then you may need to go back and experiment more.

Have you cleared states as I recommended?

Or to put their sentence in another way- " This box must be checked otherwise all IPv6 traffic will be blocked."  or  " In order for IPv6 traffic to pass you must check this box."

 :)
P.S. statements made by me are not necessarily condoned by the management of this fine organization.  http://badmodems.com

Offline cmb

  • Hero Member
  • *****
  • Posts: 11228
  • Karma: +896/-7
    • View Profile
    • Chris Buechler
Removed the screenshot because the site it linked to was serving ads containing exploits judging by some user reports of this post (and is spammy in general). Please use the image attachment function here instead.

To the issue at hand, there is no bug here. If "Allow IPv6" isn't enabled, all IPv6 is blocked. The default has that enabled, hence won't block any v6.

Offline TheRiceKing

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Removed the screenshot because the site it linked to was serving ads containing exploits judging by some user reports of this post (and is spammy in general). Please use the image attachment function here instead.

To the issue at hand, there is no bug here. If "Allow IPv6" isn't enabled, all IPv6 is blocked. The default has that enabled, hence won't block any v6.

I am sorry about that. I haven't been this active in forums since I deployed pfSense at home and also using Ubuntu Linux as primary OS. Can you please recommend a similar service that is has no virus or adds?

Thank you
ZBOX CI323 nano (Dual NIC)

Intel N3150 Quad-Core 1.6GHz, up to 2.08GHz

16GB DDR3 256SSD

Offline TheRiceKing

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Removed the screenshot because the site it linked to was serving ads containing exploits judging by some user reports of this post (and is spammy in general). Please use the image attachment function here instead.

To the issue at hand, there is no bug here. If "Allow IPv6" isn't enabled, all IPv6 is blocked. The default has that enabled, hence won't block any v6.

I am sorry about that. I haven't been this active in forums since I deployed pfSense at home and also using Ubuntu Linux as primary OS. Can you please recommend a similar service that is has no virus or adds?

Thank you

Is a known issue http://forums.androidcentral.com/samsung-galaxy-s7-edge/655209-galaxy-s7-can-t-download-apps-use-some-currently-installed-apps-over-wifi-why.html

The way I was able to fix it was by unchecking allow IPV6.  There has to be a better way without having to disable IPV6

Can someone please advise?
ZBOX CI323 nano (Dual NIC)

Intel N3150 Quad-Core 1.6GHz, up to 2.08GHz

16GB DDR3 256SSD

Offline virgiliomi

  • Sr. Member
  • ****
  • Posts: 566
  • Karma: +74/-4
    • View Profile
If you have to disable IPv6 to get Google Play downloads to function, then it sounds like there might be an issue with the IPv6 settings on your WAN or LAN interfaces, or your ISP is having issues.

Some ISP's in the US are still in the process of deploying IPv6 (and there are some that still haven't even started rolling it out). You might get an address, but it may not be a stable connection as they continue to roll it out throughout an area. Or if you have an ISP that isn't supporting it, you might need to disable it on your LAN interface to make sure that the router isn't advertising itself as an IPv6 router.