Microsoft Windows Vista Community Forums - Vistaheads
Recommended Download



Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.

Driver Scanner

Vista Firewall and local IPV6 traffic dropped?

microsoft.public.windows.vista.networking sharing






Speedup My PC
Reply
  #1 (permalink)  
Old 12-13-2007
Ernie
 

Posts: n/a
Vista Firewall and local IPV6 traffic dropped?

I finally upgraded my XP Pro system to Vista Business and have now
noticed a problem with Vista's firewall, or IPV6, maybe both.

I have some client/server software which I have used in the past. I
typically install the server component and the use client software to
interact with the server. Two such packages include the Apache Tomcat
server with your typical browsers, and also CVSNT (for source code
revision control).

I setup rules in the firewall to allow traffic to both services. But,
when I use client software to connect to the server service, there is
a lengthy delay before a connection is established. After some
research, I enabled the firewall logging and actually see incoming
IPV6 packets being dropped if I refer to the server component using
the machine's network.

For example, using my IE browser to connect to the Tomcat web server
using "http://{machinename}:8080/appName" results in the following:

2007-11-26 20:58:57 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 72 S 161832912 0 8192 - - - RECEIVE

2007-11-26 20:58:57 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 72 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:00 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 72 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:00 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 72 S 161832912 0 8192 - - - RECEIVE

2007-11-26 20:59:06 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50292 8080 68 S 60696163 0 8192 - - - RECEIVE

2007-11-26 20:59:06 DROP TCP fe80::cab:790:3f57:fe99
fe80::cab:790:3f57:fe99 50291 8080 68 S 161832912 0 8192 - - - RECEIVE

The Apache Tomcat server listens on TCP port 8080 for incoming
connections.

Also, using the CVSNT client software to try to connect to the server
using the machine name results in the following:

2007-12-08 16:20:51 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 72 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:20:54 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 72 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:21:00 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54212 2401 68 S 47232140 0 8192 - - -
RECEIVE
2007-12-08 16:21:25 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 72 S 351475315 0 8192 - - -
RECEIVE
2007-12-08 16:21:28 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 72 S 351475315 0 8192 - - -
RECEIVE
2007-12-08 16:21:34 DROP TCP fe80::2c75:1433:3f57:fef5
fe80::2c75:1433:3f57:fef5 54213 2401 68 S 351475315 0 8192 - - -
RECEIVE

The CVSNT server listens on port TCP port 2401 for incoming
connections.

If I refer to the host component using 'localhost' instead of the
machine's network name, the connection is established almost
immediately, with no delay. The delay only occurs when connecting to
the sever component using the machine name.

Also, "ping localhost" results in timely responses. If I try
"ping {machinename}", there is no response. The log file shows:

2007-12-08 19:06:50 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:06:54 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:06:59 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:07:04 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:11:08 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE
2007-12-08 19:11:19 DROP ICMP fe80::3416:f3:3f57:fef5
fe80::3416:f3:3f57:fef5 - - 80 - - - - 128 0 - RECEIVE

For testing/debugging, I have created rules for both services which
are enabled, allow the connections, specify the exact path/filename of
the service, any protocol, any port, for any local/remote ip address
for all profiles.

Can anyone provide some information why references to the machine name
result in IPV6 packets being dropped by the Vista firewall?

TIA.

Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 12-19-2007
Ernie
 

Posts: n/a
Re: Vista Firewall and local IPV6 traffic dropped?
On Wed, 12 Dec 2007 18:44:55 -0600, Ernie <user@nospam.net> wrote:

>
>I finally upgraded my XP Pro system to Vista Business and have now
>noticed a problem with Vista's firewall, or IPV6, maybe both.
>


Has no one noticed this type of problem? Or is my problem description
too vague? Do I need provide additional information?


Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista AD Member - Explorer non-responsive when 445 traffic dropped Jason R. Coombs microsoft.public.windows.vista.administration accounts passwords 0 10-31-2007 02:43
Article ID: 935945 The packets that are sent to the local computer are dropped after you establish a VPN connection by using a third-party VPN adapter on a Windows Vista-based computer KBArticles English 0 10-22-2007 20:00
How to Disable IPV6 on Local host RayG microsoft.public.windows.vista.networking sharing 0 10-15-2007 17:11
Firewall blocks network traffic Kelly Mayo microsoft.public.windows.vista.security 1 06-27-2007 21:46
Vista firewall not blocking outbound traffic despite explicit rules to do so Roof Fiddler microsoft.public.windows.vista.security 11 02-12-2007 21:08




All times are GMT +1. The time now is 10:50.




Driver Scanner - Free Scan Now

Vistaheads.com is part of the Heads Network. See also XPHeads.com , Win7Heads.com and Win8Heads.com.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.0 RC 2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120