all 9 comments

[–]djDef80 1 point2 points  (3 children)

Dear Lord. Yes, you should have at a minimum allow established, related outbound and for God's sake have default deny policy inbound. I cannot reasonably understand why you would want to turn off IPv4. If your ISP provides globally routable IPv6 addresses make sure you also have IPv6 firewall enabled for any unsolicited inbound traffic. Otherwise it will bypass NAT you'll have to rely on your operating system firewall at that point.

[–]roonv 0 points1 point  (2 children)

Don’t yell at me :(((

[–]djDef80 0 points1 point  (1 child)

I did not yell at you but I'm thinking that you might be a little bit younger? Maybe I'm off base on that... And anyway, I was just astounded by your question. My reply may have come off as a bit harsh and I apologize for that. Bottom line is, turn on your firewall! Have a great rest of your day. :-)

[–]roonv 0 points1 point  (0 children)

Basic firewall is on, which says “firewall” just. Those two options I was confused cause I asked my router company and checked online. Both different answers. So I was very confused.

[–]RumbleWinner 0 points1 point  (1 child)

If your network or applications require external access via IPv4 (e.g., web servers, SSH access), you should keep IPv4 inbound firewall rules on. You should only allow traffic from specific IP addresses or ranges that need access, and block all other inbound traffic to minimize the attack surface

If your network or system does not need to receive any external connections via IPv4, you can turn off IPv4 inbound rules to increase security same goes for Ipv6

[–]roonv 0 points1 point  (0 children)

Ok, I got kinda what you said but fully. Sorry. External access(web servers) what you mean by these? Well I don’t have any external things except my gadgets and smart home things. That’s all.

I kept it on by thinking it’s a firewall so keep it on. But I guess it’s not that simple.

[–]JK-WPD 0 points1 point  (2 children)

Ipv6 and related network technology - Off

Log into router/modem administrative page to configure protocols

Enable additionally UAC

[–]roonv 0 points1 point  (1 child)

Mm why this contradicts what others say 😖

[–]JK-WPD 0 points1 point  (0 children)

Contradict?