Disable IPv6 on pfSense
If you don’t need IPv6 you can disable it to simplify network management
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
⚙️ Check out my series on Automating Cybersecurity Metrics | Code.
🔒 Related Stories: Network Security | IPV6 | PFSense | Netgate
💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Note that this works on a Netgate 3100 but later models seem to perform differently. You can still block the traffic but for some reason it’s still appearing in my network on newer devices even after taking these steps.
I got around this by enabling IPv6 and then blocking it everywhere in the logs. Then I could choose not to log those firewall rules.
~~~
In my last post in this series I wrote about backing up and restoring PFSense aliases.
This post shows you how to “disable” IPv6 on PFSense and then resolve the issue with IPv6 traffic that still appears in logs even after you “disable” IPv6 on PFSense.