Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 10 of 10

    SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firewal)

    This is a discussion on SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firewal) within the Sky Broadband help forums, part of the Sky Broadband help and support category; Specs: Router: SR102 Firmware: 2.88.1086.R DSL Firmware version: A2pv6F039m.d24m Package: adsl basic (unlimited) What specific settings do I have to ...

    1. #1
      itsanewlifeforme's Avatar
      itsanewlifeforme is offline Sky User Member
      Exchange:
      Broadband ISP: New House - No TV
      Router: New house - no broadband
      Sky TV: Nothing yet
      Join Date
      Mar 2011
      Posts
      23
      Thanks
      4
      Thanked 0 Times in 0 Posts

      SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firewall)

      Specs:

      Router: SR102
      Firmware: 2.88.1086.R
      DSL Firmware version: A2pv6F039m.d24m
      Package: adsl basic (unlimited)

      What specific settings do I have to modify, so that the router can function as it did in the past (IPv4 - Nat router - stateful packet inspection - hardware firewall), before the IPv6 updates/additions were added to the firmware?

      I.e before the IPv6 additions to the firmware in the last few months.

      Ideally, if I could I would like to backtrack the firmware to the last pre IPv6 version, but since that is impossible, what settings can I change, to get back to that scenario instead?

      I want to go back to the hardware firewall, Nat system, that existed before the IPv6 firmware updates/additions.

      Thanks in advance,

      Itsanewlifeforme.
      Last edited by itsanewlifeforme; 23-07-15 at 11:48 AM.


    2. Advertisement
    3. #2
      Scubbie's Avatar
      Scubbie is offline Sky User Moderator
      Exchange: 02392
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Q Hub ER110
      Sky TV: Sky+HD box
      Join Date
      Mar 2010
      Location
      Near Portsmouth
      Posts
      27,908
      Thanks
      812
      Thanked 2,195 Times in 2,065 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      You could try changing the settings on the LAN IP Setup page.

      http://192.168.0.1/sky_lan_ip_setup.html

      These are new settings so it'll be interesting to know if they help.

      Sky Fibre Unlimited Pro: Connected at 80,000 kbps / 20,000 kbps
      Previous ADSL2+ Speed 19999 kbps 1153 kbps, Line Attenuation 17.5 db 6.9 db, Noise Margin 7.5 dB 8.7 dB
      Speedtest: 17.15MB/s 0.97Mb/s Ping 31 ms

    4. The Following User Says Thank You to Scubbie For This Useful Post:

      itsanewlifeforme (24-07-15)

    5. #3
      gorebrush's Avatar
      gorebrush is offline Sky User Member
      Exchange: UK
      Broadband ISP: Sky Fibre Unlimited Pro
      Router: VM pfSense 2.3.2-RELEASE-p1 on ESX 6
      Sky TV: Sky Q Silver
      Join Date
      Nov 2008
      Location
      UK
      Posts
      1,109
      Thanks
      22
      Thanked 26 Times in 26 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      Interested to hear why you wish to downgrade the firmware or disable IPv6?

      I guess you must have very old devices that do not support it? Though I was under the impression that the routers would always dole out IPv4 addresses on the local network..?
      Current Sync 79999/19999

    6. #4
      itsanewlifeforme's Avatar
      itsanewlifeforme is offline Sky User Member
      Exchange:
      Broadband ISP: New House - No TV
      Router: New house - no broadband
      Sky TV: Nothing yet
      Join Date
      Mar 2011
      Posts
      23
      Thanks
      4
      Thanked 0 Times in 0 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      Thanks you both for your reply's:

      It's important to me that the router I use for my home internet connection, has an effective, working, solid built-in firewall.

      As I see it - It adds defense depth i.e adds a layer of security to my home network.

      However - since sky are clearly at a point of moving over to ipv6 - there will be a transition period - and the routers will have to juggle both ipv4 and ipv6.

      I just want my router firewall functioning solidly as it was before the ipv6 firmware updates - i.e a secure hardware firewall.

      I don't want to be a 'guinea pig' - until they iron out any problems or weakness they are still to uncover.

      I promise you that my new post is worth a read:

      IPV6 router on IPV4 networks


      please take a look

      I would really appreciate any thoughts or comments

      itsanewlifeforme

    7. #5
      chrcol's Avatar
      chrcol is offline Sky User Member
      Exchange: Leics Central
      Broadband ISP: Sky Fibre Unlimited Pro
      Router: 8800nl(bridge) + pfSense 2.4 N3150 unit + asus ac68 as WAP
      Sky TV: FreeSAT
      Join Date
      May 2007
      Location
      Leics
      Posts
      260
      Thanks
      12
      Thanked 8 Times in 8 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      they wont juggle, it will be dual stack.

      That generally means the following assuming no issues.

      you will use ipv4 to any ipv4 only servers (most of internet).
      you will use ipv6 to any servers that support ipv6, even if they also support ipv4.

      the reason is ipv6 is typically preferenced in software.

      of course is possible things can break, e.g. someone may have a dual stack website where it doesnt load properly on ipv6 and as such you would get the broken website.

      but there will be no juggling, ipv4 and ipv6 can be enabled together.

    8. #6
      lettice's Avatar
      lettice is offline Sky User Member
      Exchange: 0.4 mile away
      Broadband ISP: Sky Fibre Unlimited
      Router: ER110UK Sky Q hub
      Sky TV: SkyQ2tb + minis
      Join Date
      Jun 2011
      Location
      England
      Posts
      1,885
      Thanks
      12
      Thanked 162 Times in 154 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      As had been said already IPv4 and IPv6 will sit comfortably together, no need to do anything.

      Some of your linked articles are good but old, especially the one from some of my friends/colleagues at arstechnica from 2007, talking about the effects on vista and laptops gaining over desktops. The iPhone had not launched then, well was a month away.
      “Every once in a while a revolutionary product comes along that changes everything,” Jobs said.

      Anyway, google has some nice analytics on the ongoing/historical ipv6 adoption that may be of interest;
      https://www.google.com/intl/en/ipv6/...=ipv6-adoption
      Also, a company that I deal with often in my line of work, Akamai, have some too;
      https://www.akamai.com/us/en/solutio...fic-volume.jsp

    9. The Following User Says Thank You to lettice For This Useful Post:

      itsanewlifeforme (24-07-15)

    10. #7
      itsanewlifeforme's Avatar
      itsanewlifeforme is offline Sky User Member
      Exchange:
      Broadband ISP: New House - No TV
      Router: New house - no broadband
      Sky TV: Nothing yet
      Join Date
      Mar 2011
      Posts
      23
      Thanks
      4
      Thanked 0 Times in 0 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      My main concern, after reading the articles, even the more recent ones is this:

      It is being highlighted, that running with IPv6 activated on our routers, upon an IPv4 only network - means that the router can no longer be seen as a solid/secure hardware firewall, protecting your home network.

      The articles seem to suggest that IPv4, enveloped within IPv6 comms, can Infact potentially bypass any hardware firewall directly - and that such attacks/malware are now being found to use this attack vector.

      One of the avast blog posts also suggests that an effective IPv6 firewall, requires significant ram and processing power to function. Whilst the sky routers are nice bits of kit, I'm unsure if they fit this description.

      Here is an very good example of why a solid/secure router hardware firewall is necessary to operate behind (home network):

      http://answers.microsoft.com/en-us/w...3-82de67a4514c

      Please keep the contributions coming, comments are open to any and all!

    11. #8
      chrcol's Avatar
      chrcol is offline Sky User Member
      Exchange: Leics Central
      Broadband ISP: Sky Fibre Unlimited Pro
      Router: 8800nl(bridge) + pfSense 2.4 N3150 unit + asus ac68 as WAP
      Sky TV: FreeSAT
      Join Date
      May 2007
      Location
      Leics
      Posts
      260
      Thanks
      12
      Thanked 8 Times in 8 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      it is out of date as said. Routers are implementing ipv6 firewalls, certianly sky routers will have a ipv6 firewall, and all asuswrt based routers do as well.

      I setup my HE ipv6 tunnel last night, and the first thing I did was port scan my ipv6 and do some manual tests, its firewalled off. This was also the case when I had native ipv6 with plusnet.

      NAT is different on ipv6, which some wont like the possible less privacy but it is the future.

      Its a bit like how BT block pings on their homehub's they still think its a security issue if pings are allowed.

    12. #9
      gorebrush's Avatar
      gorebrush is offline Sky User Member
      Exchange: UK
      Broadband ISP: Sky Fibre Unlimited Pro
      Router: VM pfSense 2.3.2-RELEASE-p1 on ESX 6
      Sky TV: Sky Q Silver
      Join Date
      Nov 2008
      Location
      UK
      Posts
      1,109
      Thanks
      22
      Thanked 26 Times in 26 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      Hmm, there is no reason why IPv6 will cause routers to be less secure. If anything, the protocol has been designed with more security features in mind. I can't speak for the SR101/102 because I don't use either of them, but there's no reason to keep it disabled for security reasons.

      I'm more than happy to use IPv6 on my kit when it's rolled out.

      Also, encapsulating IPv4 within IPv6 doesn't make your router insecure btw.
      Current Sync 79999/19999

    13. #10
      dragon2611's Avatar
      dragon2611 is offline Sky User Member
      Exchange:
      Broadband ISP: AAISP + Sky Fibre Unlimited
      Router: Non Sky Router
      Sky TV: N/A
      Join Date
      Jan 2012
      Posts
      1,241
      Thanks
      9
      Thanked 100 Times in 90 Posts

      Re: SR102 - disable IPv6 - so router returns to purely IPv4, Nat filtering mode (stateful firew

      Quote Originally Posted by itsanewlifeforme View Post
      Thanks you both for your reply's:

      It's important to me that the router I use for my home internet connection, has an effective, working, solid built-in firewall.

      itsanewlifeforme
      Then get rid of an Consumer/SoHo router and buy a proper UTM/NGFW or at least a Router that allows proper control of the inbound outbound ruleset.

      Also having IPv6 does not stop you having a stateful firewall, and quite franky any CPE manufacturer who builds an IPv6 router without such a firewall needs to be shot.

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION