Crystal Kolipe wrote:
>> This all works until I lock down too much stuff with pf.
>
> It would help to know exactly what changes you are making to your pf.conf for
> this to happen.
>
> But at a guess, are you blocking icmp6 traffic to and from the link-local
> addresses?

Hi Crystal,

I've tried a few configurations. Including this one, that seems quite
thorough in what it allows.

https://jgoguen.ca/posts/2024/07/20/openbsd-ipv6-home-internet-gateway-with-att-fibre/

Including this:
pass out quick on egress inet6 proto icmp6 from any \
  to { ff02::/16, fe80::/10 } icmp6-type { routersol, neighbradv, \
  neighbrsol }

Thank you for your reply!

-Henrich

Reply via email to