Skip to content

IPv6 time-based firewall rules in fw3 do not work as expected — traffic always blocked regardless of schedule #6

@vika-kr

Description

@vika-kr

Hello OpenWRT team,
I’m reporting an issue with fw3 related to IPv6 time-based firewall rules. When using scheduled rules (via start_time, stop_time, and weekdays) to allow or deny traffic, the behavior is inconsistent for IPv6 — traffic is always blocked, regardless of the configured time window.

Observation

  • The rule is correctly translated into ip6tables using -m time, but the traffic does not follow the schedule.
  • Even when an ACCEPT rule is configured with a time window, traffic is still blocked.
  • This issue does not occur with IPv4 — only IPv6 is affected.
  • The final DROP rule in the chain always takes precedence, suggesting the time match is not working for IPv6.

Example Rule:
ip6tables -A zone_wan_forward -p tcp -m tcp --dport 5000 -m time --timestart 12:00:00 --timestop 12:59:59 --kerneltz -m comment --comment "!fw3: test_ipv6" -j zone_lan_dest_ACCEPT

Expected behavior: traffic should be blocked only between 13:53 and 13:55.
Actual behavior: traffic is blocked outside the time window as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions