https://github.com/piotrpdev/virginhub-auto-firewall
Automatically allow traffic in firewall when global IPv6 address changes
https://github.com/piotrpdev/virginhub-auto-firewall
Last synced: 9 months ago
JSON representation
Automatically allow traffic in firewall when global IPv6 address changes
- Host: GitHub
- URL: https://github.com/piotrpdev/virginhub-auto-firewall
- Owner: piotrpdev
- License: gpl-3.0
- Created: 2024-01-11T05:00:52.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-05-13T10:39:26.000Z (about 2 years ago)
- Last Synced: 2024-05-13T11:49:27.536Z (about 2 years ago)
- Language: Go
- Homepage: https://hub.docker.com/r/piotrpdev/virgin-auto-firewall
- Size: 34.2 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# VirginHub Auto Firewall
```mermaid
sequenceDiagram
box Purple Home Network
participant HomeDevice as Device
participant Router as Router
end
box Green Internet
participant DNS as piotrp.ddns.net
participant ExternalDevice as Internet User
participant IPCheckService as IP Check Service (ipify)
end
ExternalDevice-->>DNS: Tries to access piotrp.ddns.net
DNS -->>ExternalDevice: Provides device's global IPv6 address
Note over HomeDevice: IPv6 Address Changes
ExternalDevice--xHomeDevice: Access attempt fails
alt VirginHub Auto Firewall
loop
HomeDevice->>+IPCheckService: Asks for global IPv6 address
IPCheckService-->>-HomeDevice: Provides global IPv6 address
end
Note over HomeDevice: VAF Detects IPv6 change
HomeDevice->>Router: Updates IPv6 firewall rules
end
Note over HomeDevice: NOIP DUC Detects IPv6 change
HomeDevice->>DNS: Updates to new IPv6 address
ExternalDevice-->>DNS: Tries to access piotrp.ddns.net
DNS -->>ExternalDevice: Provides device's global IPv6 address
ExternalDevice->>HomeDevice: Access attempt successful
```
I'm using the VirginHub Media Hub 6 router (`F3896LG-VMIE`) which, *at least in my area*,
doesn't allow IPv4 port forwarding. It *does* however allow setting IPv6 firewall
rules, which means that you can still expose services on your home network to the internet.
This software keeps checking your device's global IPv6 address using [ipify](https://www.ipify.org/). When the IPv6 address inevitably changes, it updates the firewall rules on the router to allow incoming connections to the new address.
This is useful for residential internet users with dynamic IPv6 addresses
that want to host services on their home network. I use this in conjunction
with the [NO-IP DUC](https://www.noip.com/support/knowledgebase/automatic-ipv6-updates-linux-duc) to expose my Raspberry Pi 4B to the internet.
> [!WARNING]
> This software was specifically designed and only works with the VirginHub
> Media Hub 6 router (`F3896LG-VMIE` by *Sagemcom*).
## Usage
I recommend the following:
```bash
sudo docker run -d \
-v /var/log:/tmp \
--net=host \
piotrpdev/virginhub-auto-firewall:1.0.0-rspi \
-logPath=/tmp/vaf.log \
-routerPassword=abcde \
-debug=true \
-oldIP=aaaa:bbbb:cccc:dddd:aaaa:bbbb:cccc:dddd
```