Seeking No HIPS FW that is IPv6-capable

Iptables is a kernel module, so the answer, I'm afraid, is no.


Unfortunately, there's a dearth of free ipv6 capable firewalls on the market, especially those without the added featurecreep, and of those that are available, the implementation usually leaves a lot to be desired.

For XP, even though you have issues with the company, CIS (Comodo) has a reasonable ipv6 implementation and you can disable/not install the bits you don't want. The only problem with the CIS ipv6 implementation is the ICMPv6 filtering. Right now, it's broken, so you either filter all icmpv6 out or you let it all in. However, that's not as bad as it sounds, as ipv6 has a much greater reliance on icmp than ipv4.

Last time I looked a Zone alarm, basically ipv6 support was on or off, but you couldn't do much with it configuration wise, maybe that's changed.

Outpost free has a fairly good ipv6 implementation and most of the unwanted items can be disabled. But the installer package is 90+MB...

 

This looks interesting, however, not much development for some time now. Although it does appear that development continues as of recently:

http://wipfw.sourceforge.net/index.html

 

Yes, as linked to by Kerodo above, but the last time I checked, it would only filter IPV4.


- Stem

 

Yes, that's what I noticed too. Perhaps they're working on IPv6 now, but one would have to ask to be sure...

 

That does look interesting. If they get IPv6 implemented properly, it looks like something I could use, at least on one OS. IP tables look like they'll be a learning experience of their own for someone who has been used to firewalls like Kerio.

 

Ultimately, Sir bellgamin, your present best bet is to invest in Windows 7 and use the inimitable Windows firewall with advanced security

 

Fancy features on firewalls. Do we need them? Firewalls must be configured as minimally as possible, to minimize risks. And if risks do not
exist, why run a firewall?
I mean just think the following things when you set up your security

All programs are buggy
Large programs are even buggier than their size would indicate.
Exposed machines should run as few programs as possible; the ones that are run
should be as small as possible.
reject everything, unless you have explicitly made the choice—and accepted the risk—to permit it.