It sure seems like the problem is buried somewhere in here.

>From shell on the LOCAL-ROUTER

These work

        ping6 -v -c 1 2600:####:####:4dff::1
                PING 2600:####:####:4dff::1(2600:####:####:4dff::1) 56 data 
bytes
                64 bytes from 2600:####:####:4dff::1: icmp_seq=1 ttl=64 
time=27.5 ms


But this doesn't.

        ping6 -v -c 1 -I 2600:####:####:4d09::1 2600:####:####:4dff::1
                PING 2600:####:####:4dff::1(2600:####:####:4dff::1) from 
2600:####:####:4d09::1 : 56 data bytes


Where the LAN side of my LOCAL-ROUTER is

        ip -6 addr show tun1
                tun1@NONE: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 
qlen 100
                    inet6 2600:####:####:4dff::2/64 scope global 
                       valid_lft forever preferred_lft forever

        ip -6 addr show eth1
                eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
                    inet6 2600:####:####:4d09::1/64 scope global 
                       valid_lft forever preferred_lft forever
                    inet6 fe80::daeb:97ff:feb0:a2f0/64 scope link 
                       valid_lft forever preferred_lft forever

        ip -6 route show
                2600:####:####:4d09::/64 dev eth1  proto kernel  metric 256  
pref medium
                2600:####:####:4dff::/64 dev tun1  proto kernel  metric 256  
pref medium
                2000::/3 dev tun1  metric 1024  pref medium
                fe80::/64 dev eth1  proto kernel  metric 256  mtu 1500 pref 
medium
                fe80::/64 dev ifb0  proto kernel  metric 256  pref medium

I keep trying different rules in Shorewall.  Ok I'm just guessing, but nothing 
I tried so far has fixed this yet.

- John

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to