[ 3006.102_4 alpha Build(s) ] available build(s)

[robinjoo1]

Strange ping via ipv6 works normally

 

[dave14305]

Strange ping via ipv6 works normally View attachment 64885

I can ping your IPv4 address and IPv6 Router LAN address just fine. What else did you do?

 

[robinjoo1]

I can ping your IPv4 address and IPv6 Router LAN address just fine. What else did you do?

Nothing
I changedDMZ

 

[ColinTaylor]

Nothing
I changedDMZ

I'm assuming (because I haven't tested this) that by putting your PS5 in the DMZ all unsolicited ICMP packets will be hitting your PS5 instead of the router's firewall. So if your PS5 is turned off there'd be no reply.

 

[robinjoo1]

I'm assuming (because I haven't tested this) that by putting your PS5 in the DMZ all unsolicited ICMP packets will be hitting your PS5 instead of the router's firewall. So if your PS5 is turned off there'd be no reply.

it seemed so
i dont know how it works specifically

 

[robinjoo1]

When u have my own Adguard server should I select

Ipv6 connect to dns server automatically

 

[dave14305]

When u have my own Adguard server should I select

Ipv6 connect to dns server automatically

No, if AdGuard provides you IPv6 addresses, use those so both IPv4 and IPv6 DNS connections are possible. Otherwise some queries may go to your ISP over IPv6.

 

[robinjoo1]

No, if AdGuard provides you IPv6 addresses, use those so both IPv4 and IPv6 DNS connections are possible. Otherwise some queries may go to your ISP over IPv6.

I now have put in the local IPV6 WAN GATEWAY fe80 as dns

 

[dave14305]

I now have put in the local IPV6 WAN GATEWAY fe80 as dns

That seems completely wrong. Why would you do that, specifically?

 

[Analog-1]

That seems completely wrong. Why would you do that, specifically?

This is listed on Merlin's features web page if using DNS/TLS. Never understood why.

IMPORTANT: for DNS Privacy to work in IPv6, you must set IPv6 DNS Server in IPv6 page (not equivalent to add IPv6 DoT servers on the WAN -> Internet Connection page) to your router's LAN IPv6 Link-Local Address. You can find your router's LAN IPv6 Link-Local Address in System Log -> IPv6 tab. Link-local address starts with fe80.

 

[dave14305]

This is listed on Merlin's features web page if using DNS/TLS. Never understood why.

IMPORTANT: for DNS Privacy to work in IPv6, you must set IPv6 DNS Server in IPv6 page (not equivalent to add IPv6 DoT servers on the WAN -> Internet Connection page) to your router's LAN IPv6 Link-Local Address. You can find your router's LAN IPv6 Link-Local Address in System Log -> IPv6 tab. Link-local address starts with fe80.

Even so, robin put the WAN gateway IPv6 LLA as DNS, not the LAN IPv6 LLA. I still think that wouldn’t be necessary since IPv6 clients would still send DNS queries to the router’s GUA address and dnsmasq, and then dnsmasq would forward to Stubby on the loopback address if DNS Privacy is active.

That Wiki snippet was added by a user.

 

[Analog-1]

hat Wiki snippet was added by a user.

So being Merlin did not publish that comment should it be ignored for TLS to work properly on IPv6. I always thought it was strange considering you add IPv6 dns servers on the TLS page.

 

[robinjoo1]

Even so, robin put the WAN gateway IPv6 LLA as DNS, not the LAN IPv6 LLA. I still think that wouldn’t be necessary since IPv6 clients would still send DNS queries to the router’s GUA address and dnsmasq, and then dnsmasq would forward to Stubby on the loopback address if DNS Privacy is active.

That Wiki snippet was added by a user.

I have to put something in those fields or just set it to
Use ipv6 dns automatically, to no
And leave the fields blank

 

[octopus]

Beta builds is out:

Beta - Asuswrt-Merlin 3006.102.4 Beta is now available

Asuswrt-Merlin 3006.102.4 Beta is now available. There are a number of significant things to note with this release: 1) BCM4912 models are now migrated to this 3006 code base. This includes the following device list: GT-AX6000 zenWifi Pro XT12 GT-AX11000 Pro GT-AXE16000 RT-AX86U Pro RT-AX88U...

www.snbforums.com

@RMerlin
We can close this.