TPLINK XDR5480 How do I set firewall rules for IPv6?

zzxxzzxxzz

As the question suggests, where can I set TPLINK's IPv6 firewall rules so that Synology can access the solution.

madman43

TP's route IPv6 does not have a firewall. Direct access via public IPv6......

zzxxzzxxzz

madman43 posted on 2021-8-6 15:51
TP's route IPv6 does not have a firewall. Direct access via public IPv6......

What an international joke,The tplink XDR5480 router I bought doesn't let go of the IPv6 port,The external network can't access my intranet NAS at all,My intranet can access the NAS through the domain name,I replaced it with my Redmi AC2100 padavan firmware can be accessed from the external network after adding ports through script commands,Obviously TP is not good,There is no firmware to brush,I don't know who can crack ssh and let me add commands to open firewall ports,Pray for God.

madman43

zzxxzzxxzz Posted on 2021-8-8 16:23
What an international joke, the TPLINK XDR5480 router I bought doesn't let go when I open the IPv6 port, and the external network can't access my intranet NAS at all, ...

I asked the TP engineer, I bought 6080, the port mapping is only for ipv4, how to forward the public network address directly given by v6, do you want to laugh at me, check whether the domain name supports v6 resolution, or directly add the v6 address to the port access to try

zzxxzzxxzz

madman43 Posted on 2021-8-8 16:55
I asked the TP engineer, the 6080 I bought, the port mapping is only for IPv4, how to forward the public network address given directly by V6, do you want to laugh to death, arrange it yourself...

IPV 6 has no port forwarding, only port firewall you think about it yourself

zzxxzzxxzz

madman43 Posted on 2021-8-8 16:55
I asked the TP engineer, the 6080 I bought, the port mapping is only for IPv4, how to forward the public network address given directly by V6, do you want to laugh to death, arrange it yourself...

Look at what I have been emphasizing on the firewall rules, what port forwarding are you talking to me, you haven't figured out IPv6 and it's not interesting to talk nonsense, of course, the enthusiasm for replying to the post is worthy of recognition, but it's a bit funny if you don't understand it and talk to me again.

madman43

zzxxzzxxzz Posted on 2021-8-12 19:57
IPV 6 has no port forwarding, only port firewall you think about it yourself

Laugh to death, let me tell you that TP does not have a v6 firewall, what kind of v6 do you have, and it is also etc

zzxxzzxxzz

madman43 Posted on 2021-8-8 16:55
I asked the TP engineer, the 6080 I bought, the port mapping is only for IPv4, how to forward the public network address given directly by V6, do you want to laugh to death, arrange it yourself...

I will also say a few more words, TP's XDR 5480 6080 does have a good function to register a TPLink account, get a free second-level domain name for dynamic domain resolution, no peanut shell does not need Alibaba DDNS, etc., you can directly access your NAS through this generated second-level domain name on the Internet, but, but I have my own domain name, I have IPv6 I don't like to use this second-level domain name, so I strongly recommend that TP manufacturers can open the IPv6 firewall setting function, Or expect the god to crack ssh so that I can enter the configuration and modify the firewall.

madman43

zzxxzzxxzz Posted on 2021-8-12 20:05
Let me say a few more words, TP's XDR 5480 6080 does have a good function to register a TPLink account and get a free second-level domain name to do ...

Impossible, the first two routes of TP do not have IPv6 firewall, the second route space is too small to do more DDNS, you can use your own domain name to bypass DDNS, SSH TP regular firmware does not exist, every time you need to compile the firmware with tetnet function on the spot for users to flash in and then get the data, and entering telnet also needs to send a password for the engineer.

Firewall rules aren't inside the firewall? There are no rules for the v6 firewall, who doesn't understand it clearly

zzxxzzxxzz

madman43 Posted on 2021-8-12 19:59
Laugh to death, let me tell you that TP does not have a v6 firewall, what kind of v6 do you have, and it is also etc

Who told you that TPLink doesn't have an IPv6 firewall?

zzxxzzxxzz

madman43 posted on 2021-8-12 20:18
Impossible, these two routes of the first TP do not have IPv6 firewalls, and the second route space is too small to do more DDNS.

The latest firmware of tp comes with ddns, which is the second-level domain name of tp, what does this have to do with the size of the routing space? Its ancestral 16M firmware still supports ddns, its firmware is encrypted, it is certain that it can be used with ssh or telnet, I am looking forward to the god doing this cracking work, as for what you said is not a firewall, so why can't my NAS extranet be accessed, the intranet can be accessed with my domain name, the domain name has been AAAA pointed, NAS has done Ali ddns, this switching route has added port rules to the firewall can be accessed immediately, I also posted with a thinking mentality to ask for advice

madman43

zzxxzzxxzz Posted on 2021-8-12 20:20
Who told you that TPLink doesn't have an IPv6 firewall?

No need for private messages, why is it impossible for you to go to your router to see how much space is available in the application? ? As for who told me, I have already said it above

samond

TP's ddns only parses A records and does not resolve AAAA records

zzxxzzxxzz

samond posted on 2021-8-14 09:21
TP's ddns only parses A records and does not resolve AAAA records

Yes, that's right, and the parsed A record can only go to the router wan side, and I still need port mapping to use NAS, which I find troublesome
I have a domain name, and there is an Alibaba DDNS script on the server side, which needs to parse AAAA records and hand it over to my server to automatically report the ipv6 address to the domain name resolution in real time, and the external network directly accesses my NAS through the domain name
The Redmi AC2100 I am currently using uses flashing Padavan to open specific ports on the IPv6 firewall and the external network can be directly accessed, which is more secure than turning off the real IPv6
My argument with upstairs was that he didn't understand what I meant, and he also argued with me that TP's IPv6 had no firewall, and if there was no firewall extranet to directly access the device where I got the IPv6 address, there would be no point in my posting
After arguing for a long time and saying that the firmware space of ITP is small and the firmware of 16M cannot integrate DDNS, then I told him that it is really integrated in that small firmware
This ddns does parse A records as you said, I don't need it, so I don't use it

tr069

It is estimated that there was no V6 fire prevention before, but obviously there is now, and other brands are like this.