Firewalling IPv6 on Win 2k ?

[Czerno]

Having newly installed the IPv6 technological preview from MS to Windows 2000 Pro, I'm looking for an adequate firewall. Requirements could be :

- FW must be able to inspect v6 packets tunnelled in IPv4 (proto 41)
- inspection of native IPv6 packets (on the LAN) not necessary
- should also firewall IPv4 (or play nicely with a v4 only FW, such as Kerio 2)
- rule based
- free, or low cost.

If somebody got ideas, please kindly share !

[Rules]

-{ Quote: "Having newly installed the IPv6 technological preview from MS to Windows 2000 Pro, I'm looking for an adequate firewall. Requirements could be :

- FW must be able to inspect v6 packets tunnelled in IPv4 (proto 41)
- inspection of native IPv6 packets (on the LAN) not necessary
- should also firewall IPv4 (or play nicely with a v4 only FW, such as Kerio 2)
- rule based
- free, or low cost.

If somebody got ideas, please kindly share !" }-


You can try the free outpost IPV6 Protocol
http://free.agnitum.com/

Rules.

[Czerno]

Thanks. Are you sure Outpost does ipv6-in-4 inspection ? I emailed their support but got no reply (yet). I'm asking for a confirm because I am sick of things that won't do the trick (like LookandStop or Privatefirewall). Installing/uninstalling things is always a risk as you know !

[Rules]

-{ Quote: "Thanks. Are you sure Outpost does ipv6-in-4 inspection ? I emailed their support but got no reply (yet). I'm asking for a confirm because I am sick of things that won't do the trick (like LookandStop or Privatefirewall). Installing/uninstalling things is always a risk as you know !" }-


It's more reasonable to wait few days for the answer of Agnitum Support reply for be sure sure sure:D

Regards.
Rules
Vista x64 sp2, Outpost Pro 6.7, Avira Premium

[Czerno]

-{ Quote: "It's more reasonable to wait few days for the answer of Agnitum Support reply for be sure sure sure:D " }-

I followed your excellent advice. After Agnitum support emailed with :
-{ Quote: "
We do not have any data which denies IPv6 filtering in Outpost. If you
come across the problems in IPv6 filtering, please, contact us again.
" }-

...did I install Agnitum Free FW. Unfortunately it just broke IPv6 completely :-(
Even the "ipv6.exe" utility could not find the interfaces any more!

Uninstalling Agnitum was the only solution, and worked correctly resetting IPv6.

Agnitum may be an otherwise good firewall, but it is not working in this occurrence.

therefore, still chasing the rare bird... Any ideas welcome

[cqpreson]

In my mind,Lock n Stop supports IPv6.

[Czerno]

-{ Quote: "In my mind,Lock n Stop supports IPv6." }-

Well, it may support NATIVE IPv6 but it doesn't do what I'm asking of a firewall,
i.e. inspect 6in4 packets. This was checked and confirmed with LnS developer here on Wilders :=(

I'm finding it kinda strange that all those FW support native IPv6 (which nobody has, at least not on the WAN), and none seem to support tunnels - that everybody has (or can get at easily).


Cheers...