On 2026 Apr 10 (Fri) at 13:12:54 -0400 (-0400), Sonic wrote: :Not sure what I'm doing wrong as I just started to enable ipv6 access :using an OpenBSD based router, running the latest snapshots. :The issue is that I lose general net access via ipv6 from client :systems after rebooting the router. The client systems correctly :configure themselves using SLAAC and I can ping6 systems on the :Internet, but general net access such as that from a browser fails - :https://test-ipv6.com/ claims no public ipv6 address. :However if I reload the pf rules after the reboot (pfctl -f :/etc/pf.conf) all client systems start to work fine. :Any clues on what I might be missing? : :Thank you, :Chris : You'll need to show your pf.conf for us to properly debug it, but I predict the issue is either you are using dns names in pf.conf (which only resolve at pfctl time...) or you forgot to add ()'s around interfaces, so it only has the addresses that were assigned at pfctl time. Probably sprinkle some (egress) or (em0) in your ruleset, especially if you receive your own addresses from slaac/dhcp. -- Do not sleep in a eucalyptus tree tonight.
No comments:
Post a Comment