Firewall/NAT

I upgraded to 1.8.1b532. I have an IPv6 Tunnel with SixXS. I am continuously getting this error in the firewall logs, even though I enabled ICMP both in IPv4 and IPv6 rules. Not sure what ngwan0 is. IPv6 works fine other than this error.

15:52:57.794201 ngwan0 @200:4 b 216.14.98.22 -> (my WAN IP) PR icmp len 20 104 icmp
unreach/protocol for (my WAN IP) - 216.14.98.22 PR ipv6 len 20 (76) IN


216.14.98.22 is Your.org which maintains my tunnel.

Rule @4: pass in quick proto icmp from any to any keep state group 200


Thanks for your help.

Also getting this error when I run the AICCU test from within m0n0wall:

###### [5/8] Ping the IPv6 Local/Your Inner Tunnel Endpoint (my WAN IPv6)
### This confirms that your tunnel is configured
### If it doesn't reply then check your interface and routing tables

PING6(56=40+8+8 bytes) my WAN IPv6 --> my WAN IPv6
16 bytes from my WAN IPv6 Echo Request
16 bytes from my WAN IPv6 Echo Request
56 bytes from ...: Router Advertisement
16 bytes from my WAN IPv6 Echo Request

--- my IPv6 ping6 statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss

Can you post your firewall rules?

Sure. IPv6 WAN firewall rules.

Pass Proto       Source Port Destination Port

Deny none
Pass IPv6-ICMP *          *       *              *
Pass TCP/UDP   *          *     LAN     6881-6999

IPv6 LAN  allow everything

IPv6 DMZ everything blocked (No IPv6 setup on this interface).

I also have this guy's problems. Tons of in/out errors.

http://forum.m0n0.ch/index.php?topic=5777.0

Thanks.