Page 1 of 1

igmp vs icmp

Posted: Tue May 28, 2019 8:48 pm
by bobob
Can anyone explain why my firewall logs countless ICMP requests on my forward chain in my IPV6 firewall.
I have allowed IGMP,and even protocol 1 (because ICMP is not on the list of protocols in my IPV6 firewall), but ICMP drops still seem to appear in the log.
My drop-all rule at the bottom of my forward chain still complains about ICMP traffic.
Hardware: CRS125-24G1S-2hnD
I have a 6/4 tunnel to HE witch are feeding the ipv6 traffic.

Edit: Running version 6.44.3 of RouterOS

Re: igmp vs icmp

Posted: Tue May 28, 2019 9:25 pm
by proximus
icmpv6 (protocol 58) is an option in the IPv6 firewall configuration. (Protocol 1 is IPv4 ICMP ... not v6)

IPv6 is dependent on ICMPv6 and should not be blocked, unless you really understand which types can be.