Real Geek Forums  

Go Back   Real Geek Forums > Archives > Operating Systems > Windows Vista > Windows Vista Networking & Sharing

Notices

Reply

Vista Firewall and local IPV6 traffic dropped?

 

LinkBack Thread Tools Display Modes
Old 12-12-2007, 11:44 PM   #1 (permalink)
Default Vista Firewall and local IPV6 traffic dropped?


I finally upgraded my XP Pro system to Vista Business and have now
noticed a problem with Vista's firewall, or IPV6, maybe both.

I have some client/server software which I have used in the past. I
typically install the server component and the use client software to
interact with the server. Two such packages include the Apache Tomcat
server with your typical browsers, and also CVSNT (for source code
revision control).

I setup rules in the firewall to allow traffic to both services. But,
when I use client software to connect to the server service, there is
a lengthy delay before a connection is established. After some
research, I enabled the firewall logging and actually see incoming
IPV6 packets being dropped if I refer to the server component using
the machine's network.

For example, using my IE browser to connect to the Tomcat web server
using "http://{machinename}:8080/appName" results in the following:

2007-11-26 20:58:57 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 72 S 161832912 0 8192 - - - RECEIVE

2007-11-26 20:58:57 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 72 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:00 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 72 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:00 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 72 S 161832912 0 8192 - - - RECEIVE

2007-11-26 20:59:06 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 68 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:06 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 68 S 161832912 0 8192 - - - RECEIVE

The Apache Tomcat server listens on TCP port 8080 for incoming
connections.

Also, using the CVSNT client software to try to connect to the server
using the machine name results in the following:

2007-12-08 16:20:51 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 72 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:20:54 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 72 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:21:00 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 68 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:21:25 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 72 S 351475315 0 8192 - - -
RECEIVE
2007-12-08 16:21:28 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 72 S 351475315 0 8192 - - -
RECEIVE
2007-12-08 16:21:34 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 68 S 351475315 0 8192 - - -
RECEIVE

The CVSNT server listens on port TCP port 2401 for incoming
connections.

If I refer to the host component using 'localhost' instead of the
machine's network name, the connection is established almost
immediately, with no delay. The delay only occurs when connecting to
the sever component using the machine name.

Also, "ping localhost" results in timely responses. If I try
"ping {machinename}", there is no response. The log file shows:

2007-12-08 19:06:50 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:06:54 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:06:59 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:07:04 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:11:08 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:11:19 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE

For testing/debugging, I have created rules for both services which
are enabled, allow the connections, specify the exact path/filename of
the service, any protocol, any port, for any local/remote ip address
for all profiles.

Can anyone provide some information why references to the machine name
result in IPV6 packets being dropped by the Vista firewall?

TIA.

Ernie
Guest
 
Posts: n/a
Reply With Quote  
Old 12-19-2007, 01:51 AM   #2 (permalink)
Default Re: Vista Firewall and local IPV6 traffic dropped?

On Wed, 12 Dec 2007 18:44:55 -0600, Ernie <user@nospam.net> wrote:
Quote:
>
>I finally upgraded my XP Pro system to Vista Business and have now
>noticed a problem with Vista's firewall, or IPV6, maybe both.
>
Has no one noticed this type of problem? Or is my problem description
too vague? Do I need provide additional information?


Ernie
Guest
 
Posts: n/a
Reply With Quote  
Reply

Tags
None

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads

Thread Thread Starter Forum Replies Last Post
Vista AD Member - Explorer non-responsive when 445 traffic dropped Jason R. Coombs Windows Vista Administration 0 10-31-2007 01:43 AM
How to Disable IPV6 on Local host RayG Windows Vista Networking & Sharing 0 10-15-2007 04:11 PM
Vista firewall not blocking outbound traffic despite explicit rules to do so Roof Fiddler Windows Vista Security 11 02-12-2007 07:08 PM
ipv6 connection firewall 2scoopes Windows XP Help & Support 0 11-13-2003 06:08 PM
xp firewall block my VPN netbios traffic zhu zhu Windows XP Network & Web 0 08-27-2003 06:53 AM


All times are GMT. The time now is 06:37 PM.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright © 2005 - 2007 RealGeek.com. All rights reserved.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90