NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

schumaku's avatar
schumaku
Guru - Experienced User
Apr 09, 2018
Status:
New Idea

Firewall Rules for Internet/WAN -> LAN on IPv4 and IPv6, LAN -> WAN/Internet for IPv4 and IPv6

Amazing Orbi, Orbo Pro, Nighthawk Routers, DSL Routers, Mobile Routers have service blocking (only for IPv4 why ever) - limiting the LAN -> Internet access (why ever somebody want to do this) but there is no control to manage firewall rules for Internet/WAN -> LAN. 

 

When can we expect a workable UI ot manage firewall rules for IPv4 and IPv6 LAN->Internet and Internet/WAN->LAN please?

 

And then support for a ISP changing IPv6 prefix (ie. if the ISP does change the IPv6 prefix because they use rapid deployment (6rd) where the prefix is linked to the IPv4 address. 

And every time a user is seeking or this the Netgear mods reply to use Service Blocking - what of course does not work for WAN/Internet -> LAN.

AbhayB NaderA


Cable Modems & Routers
DSL Modems & Routers
Orbi WiFi System
WiFi Routers

13 Comments

  • feldon30's avatar
    feldon30
    Follower
    Apr 09, 2018

    And before saying "but this feature is only in $1K Enterprise-level routers!", a cheap Linksys WRT54G running the open source DD-WRT firmware can do iptables blocks of IP addresses and ranges. Let's hope Netgear chooses to prioritize and implement this feature!

  • schumaku's avatar
    schumaku
    Guru - Experienced User
    Apr 09, 2018

    feldon30 +1.

    The Taiwan based Z brand does offer fully fledged UTM appliances starting from about 300 US$ for 400 Mbps (Firewall), 100 Mbps (VPN - SSL, L2TP and IPSec, 20 IPSec Tunnels and 5 SSL Upgradable to 15) and 50 Mbps UTM for 50000 sessions. johngm

  • JasonN's avatar
    JasonN
    NETGEAR Employee Retired
    Apr 11, 2018

    Hi schumaku,

    Thank you for submitting your idea on how we can improve the product. Your suggestion will be reviewed for consideration. :]

     

     

    - Jason N

  • bengt0's avatar
    bengt0
    Fledgling
    Oct 04, 2018

    Agree, I also expected it to be in place. Any update from Netgear?

     

    Thanks / Bengt

  • ChrisJ60's avatar
    ChrisJ60
    Follower
    Dec 17, 2018

    Amazed that NetGear's premium routers do not have this! I was considering purchasing a Nighthawk X10 but unless it has fully customizable *inbound* firewall rules for oith Ipv4 and Ipv6 then it is a non-starter for me I;m afraid. Note that the Apple Airport Extreme has had this feature for a great many years...

  • schumaku's avatar
    schumaku
    Guru - Experienced User
    Mar 06, 2020

    ChristineT can we get some updates on this topic, or will NTRG continue to design and implement non-competitive specs from the early 1980ties?

  • DLPS-Owner's avatar
    DLPS-Owner
    Novice
    Mar 23, 2020

    Mind Blown: The "filter services" feature greys out settings for blocking ONLY IPV4 internal network addresses! Why? Norton does this. Windows firewall does this. When we paid all that money for an ORBI, I figure it would have more features than a $70 security appliance. So, help me understand the logic of not allowing this for home users? Should I use the "Key Word" feature to block specific IP addresses? Or, is this appliance so good at what it does, that businesses would by it on an enterprise level, for that feature alone, and you don't want it to compete with your other appliances that you charge 10's of thousands for?

    IF you specifically disallow this, you should lead with that! Seems a little unethical and bait-and-switchy...

    Another problem I have is the SSL feature. Wouldn't it be nice if you had a native encryption to go along with your settings UI? Not cool.

    Other than that, great product. Love it!

  • orbisteve's avatar
    orbisteve
    Aspirant
    Nov 16, 2020

    +1 from me, too, to all of the above. Amazing that it's been a couple of years and we sitll don't have any of this.