any plan to update ip(6)tables

[sdhzdmzzl]

since ip6tables didn't support NAT chain until version 1.4.17。I want to config a transparent proxy in my ac86u supporting ipv6.ip6tables rule like this:
ip6tables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 6081
But it says ip6tables v1.4.12.2: unknown option "--to-ports".

thanks.

 

[RMerlin]

There's currently no plans to update iptables, as this can get tricky to do because of the kernel version, and the risk of breaking other firmware components.

 

[DigitizedMe]

Just fishing for a little information. I'm guessing ip6tables is part of the ASUS blob?

I'm wondering if there is any likely hood they would update at any point in the future? Right now ip6tables version is 1.4.15 and I would need 1.4.18+ to mirror ipv4 port forwarding and routing.

I'm only reaching out since I use a single domain name, that points to my router's public ipv4 address. I use this domain on ipv4 for SSH, VPN, and port forwarding 80 and 443 to an internal web server. Without NAT, I can't use the single ipv6 AAAA record, and selectively route ports 80 and 443 to an internal machine. I have to point it directly to the server's ipv6 address.

https://github.com/RMerl/asuswrt-merlin.ng/issues/225

Thanks for everything as always.

 

[Swistheater]

The lovely asus setup, while it allows for ipv6 functionality, it is behind the times in some aspects for allowing special user configurations. I figure they just assume everyone only supplements their connections with ipv6 vs having a dedicated connection via ipv6 or special handles with ipv6.

 

[DigitizedMe]

I was reading up a little bit about why DDNS services (specifically inadyn and Google Domains) doesn't support updating ipv6 AAAA records, and the consensus was that ipv6 wouldn't be truly dynamic. If its intended to be more of a static address (based on the ISP of course), then you would think that vendors would allow a bit more configuration options like ip6tables 1.4.18+ supports. :/

Maybe it would increase adoption of the protocol. It's kind of weird it's been around for so long and it's still not widely used.