Addendum, my pf ruleset:
match in all scrub (no-df max-mss 1440)
anchor "ftp-proxy/*" all
anchor "relayd/*" all
match out on em1 from ! (em1) to any nat-to (em1) round-robin
match in on em0 inet proto tcp from any to (em0) port = 21 rdr-to
127.0.0.1 port 8021
match in on em0 inet proto tcp from any to (em0) port = 80 rdr-to
127.0.0.1 port 3128
match in on em1 inet proto tcp from any to (em1) port = 2027 rdr-to
192.168.50.9 port 2027
match in on em1 inet proto tcp from any to (em1) port = 46411 rdr-to
192.168.50.9 port 46411
match in on em1 inet proto udp from any to (em1) port = 46411 rdr-to
192.168.50.9 port 46411
match in on em1 inet proto tcp from any to (em1) port = 25 rdr-to
127.0.0.1 port 8025
block drop in log all
pass out all flags S/SA keep state (if-bound)
anchor "ftp-proxy/*" all
block drop in log on em1 from <ssh-violations> to any
block drop in log on gif0 from <ssh-violations> to any
block drop out on em1 proto udp from any to any port = 631
pass quick on em1 inet proto ipencap all keep state (if-bound)
pass quick on em1 inet proto ipv6 all keep state (if-bound)
pass in quick on gif0 inet6 proto ipv6-icmp from 2001:1620:f00:56::1 to
2001:1620:f00:56::2 keep state (if-bound)
pass in on em1 proto udp from any to (em1) port = 1194 keep state
(if-bound)
pass in on em1 proto udp from any to (em1) port = 1196 keep state
(if-bound)
pass in on em1 proto udp from any to (em1) port = 5003 keep state
(if-bound)
pass in on em1 proto udp from any to (em1) port = 5501 keep state
(if-bound)
pass in on em1 proto udp from any to (em1) port = 7777 keep state
(if-bound)
pass in on em1 inet proto udp from 80.83.41.48 to 85.218.24.18 port =
500 keep state (if-bound)
pass in on em1 inet proto udp from 80.83.41.48 to 85.218.24.18 port =
4500 keep state (if-bound)
pass in on gif0 proto udp from any to (gif0) port = 1196 keep state
(if-bound)
pass in on gif0 proto udp from any to (gif0) port = 5003 keep state
(if-bound)
pass in on gif0 proto udp from any to (gif0) port = 5501 keep state
(if-bound)
pass in on gif0 proto udp from any to (gif0) port = 7777 keep state
(if-bound)
pass in on em1 inet proto esp from 80.83.41.48 to 85.218.24.18 keep
state (if-bound)
pass in on em1 inet proto ah from 80.83.41.48 to 85.218.24.18 keep state
(if-bound)
pass in on enc0 inet proto ipencap from 80.83.41.48 to 85.218.24.18 keep
state (if-bound)
pass in inet proto icmp all icmp-type echoreq keep state (if-bound)
pass in on enc0 inet from 192.168.30.0/23 to 192.168.50.0/24 flags S/SA
keep state (if-bound)
pass in on em1 proto tcp from any to (em1) port 2027:2037 flags S/SA
keep state (if-bound)
pass in on gif0 proto tcp from any to (gif0) port 2027:2037 flags S/SA
keep state (if-bound)
pass out on em1 inet proto udp from 85.218.24.18 to 80.83.41.48 port =
500 keep state (if-bound)
pass out on em1 inet proto udp from 85.218.24.18 to 80.83.41.48 port =
4500 keep state (if-bound)
pass out on em1 inet proto esp from 85.218.24.18 to 80.83.41.48 keep
state (if-bound)
pass out on em1 inet proto ah from 85.218.24.18 to 80.83.41.48 keep
state (if-bound)
pass out on enc0 inet proto ipencap from 85.218.24.18 to 80.83.41.48
keep state (if-bound)
pass out on enc0 inet from 192.168.50.0/24 to 192.168.30.0/23 flags S/SA
keep state (if-bound)
pass in log on em1 proto tcp from any to (em1) port = 22 flags S/SA
synproxy state (source-track rule, max-src-conn-rate 3/30, overload
<ssh-violations> flush global, if-bound, src.track 30)
pass in log on gif0 proto tcp from any to (gif0) port = 22 flags S/SA
synproxy state (source-track rule, max-src-conn-rate 3/30, overload
<ssh-violations> flush global, if-bound, src.track 30)
pass in log on em1 proto tcp from any to (em1) port = 25 flags S/SA keep
state (if-bound)
pass out log on em1 proto tcp from (em1) to any port = 25 flags S/SA
keep state (if-bound)
pass in on em1 proto tcp from any to any port = 46411 no state
pass in on em1 proto udp from any to any port = 46411 no state
pass proto ipv6 all keep state (if-bound)
pass in on em1 proto udp from any to (em1) port = 37465 keep state
(if-bound)
pass out on em0 all no state
pass in on em0 all flags S/SA keep state (if-bound)
pass quick on tun1 all no state
pass quick on tun2 all no state
pass quick on tun3 all no state
pass quick inet from 224.0.0.0/7 to any flags S/SA keep state (if-bound)
On Sat, 2013-05-04 at 16:49 +0200, Nothingness wrote:
> Hi all,
>
> Upgraded from 5.2 to 5.3 i386, using my usual config I've had for a
> number of years. Unfortunately I cannot ping6 a single thing, not even
> localhost, and bgpd (patched with the March 15th patch) won't start via
> rc.conf.local (all other daemons work). I've tried reinstalling the
> kernel from a different mirror, troubleshooting with aiccu, and can't
> find any real reason for this. Up till now this configuration worked
> just fine, never a hitch (over a number of years). Hopefully someone has
> a suggestion?
>
> Cheers,
>
> Noth
>
>
> See below for dmesg, aiccu test, netstat -rn & sysctl -a | grep inet6
>
> OpenBSD 5.3 (GENERIC.MP) #58: Tue Mar 12 18:43:53 MDT 2013
> dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
> RTC BIOS diagnostic error 80<clock_battery>
> cpu0: Intel(R) Atom(TM) CPU D2500 @ 1.86GHz ("GenuineIntel" 686-class)
> 1.87 GHz
> cpu0:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC
> real mem = 3471089664 (3310MB)
> avail mem = 3403386880 (3245MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 03/23/12, SMBIOS rev. 2.7 @
> 0xceebd000 (28 entries)
> bios0: vendor Intel Corp. version "CCCDT10N.86A.0032.2012.0323.1510"
> date 03/23/2012
> bios0: Intel Corporation D2500CC
> acpi0 at bios0: rev 2
> acpi0: sleep states S0 S3 S4 S5
> acpi0: tables DSDT FACP SSDT APIC MCFG HPET
> acpi0: wakeup devices SLT1(S4) PS2M(S4) PS2K(S4) UAR1(S3) UAR2(S3)
> UAR3(S4) UAR4(S4) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB7(S3) PXSX(S4)
> RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PWRB(S4)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: apic clock running at 133MHz
> cpu1 at mainbus0: apid 1 (application processor)
> cpu1: Intel(R) Atom(TM) CPU D2500 @ 1.86GHz ("GenuineIntel" 686-class)
> 1.87 GHz
> cpu1:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC
> ioapic0 at mainbus0: apid 8 pa 0xfec00000, version 20, 24 pins
> ioapic0: misconfigured as apic 0, remapped to apid 8
> acpimcfg0 at acpi0 addr 0xe0000000, bus 0-63
> acpihpet0 at acpi0: 14318179 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus 3 (P0P1)
> acpiprt2 at acpi0: bus 2 (RP01)
> acpiprt3 at acpi0: bus 1 (RP02)
> acpiprt4 at acpi0: bus -1 (RP03)
> acpiprt5 at acpi0: bus -1 (RP04)
> acpicpu0 at acpi0
> acpicpu1 at acpi0
> acpibtn0 at acpi0: PWRB
> acpibtn1 at acpi0: SLPB
> acpivideo0 at acpi0: GFX0
> acpivout0 at acpivideo0: DD02
> bios0: ROM list: 0xc0000/0xf400!
> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> pchb0 at pci0 dev 0 function 0 "Intel Atom D2000/N2000 Host" rev 0x03
> vga1 at pci0 dev 2 function 0 "Intel Atom D2000/N2000 Video" rev 0x09
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> intagp at vga1 not configured
> azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi
> azalia0: codecs: Realtek ALC888
> audio0 at azalia0
> ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 8 int
> 16
> pci1 at ppb0 bus 2
> em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi,
> address 00:22:4d:88:5c:4f
> ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 8 int
> 17
> pci2 at ppb1 bus 1
> em1 at pci2 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi,
> address 00:22:4d:88:5c:52
> uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 8 int
> 23
> uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 8 int
> 19
> uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 8 int
> 18
> uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 8 int
> 16
> ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 8 int
> 23
> usb0 at ehci0: USB revision 2.0
> uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
> ppb2 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xe2
> pci3 at ppb2 bus 3
> pcib0 at pci0 dev 31 function 0 "Intel NM10 LPC" rev 0x02
> ahci0 at pci0 dev 31 function 2 "Intel 82801GR AHCI" rev 0x02: msi, AHCI
> 1.1
> scsibus0 at ahci0: 32 targets
> sd0 at scsibus0 targ 0 lun 0: <ATA, WDC WD10JPVT-22A, 01.0> SCSI3
> 0/direct fixed naa.50014ee6ad7915f1
> sd0: 953869MB, 512 bytes/sector, 1953525168 sectors
> sd1 at scsibus0 targ 1 lun 0: <ATA, WDC WD10JPVT-22A, 01.0> SCSI3
> 0/direct fixed naa.50014ee65823f816
> sd1: 953869MB, 512 bytes/sector, 1953525168 sectors
> ichiic0 at pci0 dev 31 function 3 "Intel 82801GB SMBus" rev 0x02: apic 8
> int 19
> iic0 at ichiic0
> lm1 at iic0 addr 0x2d: W83627DHG
> spdmem0 at iic0 addr 0x50: 2GB DDR3 SDRAM PC3-8500 SO-DIMM
> spdmem1 at iic0 addr 0x51: 2GB DDR3 SDRAM PC3-8500 SO-DIMM
> usb1 at uhci0: USB revision 1.0
> uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
> usb2 at uhci1: USB revision 1.0
> uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
> usb3 at uhci2: USB revision 1.0
> uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
> usb4 at uhci3: USB revision 1.0
> uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1
> isa0 at pcib0
> isadma0 at isa0
> com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
> com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
> pcppi0 at isa0 port 0x61
> spkr0 at pcppi0
> wbsio0 at isa0 port 0x2e/2: W83627UHG rev 0x32
> lm2 at wbsio0 port 0x290/8: W83627DHG
> npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
> mtrr: Pentium Pro MTRR support
> lm1: disabling sensors due to alias with lm2
> uhidev0 at uhub2 port 1 configuration 1 interface 0 "Logitech Logitech
> USB Keyboard" rev 1.10/28.00 addr 2
> uhidev0: iclass 3/1
> ukbd0 at uhidev0: 8 variable keys, 6 key codes
> wskbd0 at ukbd0: console keyboard, using wsdisplay0
> vscsi0 at root
> scsibus1 at vscsi0: 256 targets
> softraid0 at root
> scsibus2 at softraid0: 256 targets
> sd2 at scsibus2 targ 1 lun 0: <OPENBSD, SR RAID 1, 005> SCSI2 0/direct
> fixed
> sd2: 931338MB, 512 bytes/sector, 1907380720 sectors
> root on sd0a (f4957e152fc76b0f.a) swap on sd0b dump on sd0b
>
>
> # aiccu test
> Tunnel Information for T30693:
> POP Id : chzrh02
> IPv6 Local : 2001:1620:f00:56::2/64
> IPv6 Remote : 2001:1620:f00:56::1/64
> Tunnel Type : 6in4-heartbeat
> Adminstate : enabled
> Userstate : enabled
> ifconfig: SIOCAIFADDR: File exists
> route: writing to routing socket: File exists
> add net default: gateway 2001:1620:f00:56::1: File exists
> #######
> ####### AICCU Quick Connectivity Test
> #######
>
> ####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (85.218.24.18)
> ### This should return so called 'echo replies'
> ### If it doesn't then check your firewall settings
> ### Your local endpoint should always be pingable
> ### It could also indicate problems with your IPv4 stack
>
> PING 85.218.24.18 (85.218.24.18): 56 data bytes
> 64 bytes from 85.218.24.18: icmp_seq=0 ttl=255 time=0.202 ms
> 64 bytes from 85.218.24.18: icmp_seq=1 ttl=255 time=0.078 ms
> 64 bytes from 85.218.24.18: icmp_seq=2 ttl=255 time=0.080 ms
> --- 85.218.24.18 ping statistics ---
> 3 packets transmitted, 3 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 0.078/0.120/0.202/0.057 ms
>
> ######
>
> Did this work? [Y/n]
>
> ####### [2/8] Ping the IPv4 Remote/PoP Outer Endpoint (213.144.148.74)
> ### These pings should reach the PoP and come back to you
> ### In case there are problems along the route between your
> ### host and the PoP this could not return replies
> ### Check your firewall settings if problems occur
>
> PING 213.144.148.74 (213.144.148.74): 56 data bytes
> 64 bytes from 213.144.148.74: icmp_seq=0 ttl=53 time=17.141 ms
> 64 bytes from 213.144.148.74: icmp_seq=1 ttl=53 time=13.464 ms
> 64 bytes from 213.144.148.74: icmp_seq=2 ttl=53 time=12.887 ms
> --- 213.144.148.74 ping statistics ---
> 3 packets transmitted, 3 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 12.887/14.497/17.141/1.886 ms
>
> ######
>
> Did this work? [Y/n]
>
> ####### [3/8] Traceroute to the PoP (213.144.148.74) over IPv4
> ### This traceroute should reach the PoP
> ### In case this traceroute fails then you have no connectivity
> ### to the PoP and this is most probably the problem
>
> traceroute to 213.144.148.74 (213.144.148.74), 64 hops max, 40 byte
> packets
> 1 192.168.0.1 (192.168.0.1) 0.452 ms 0.227 ms 0.187 ms
> 2 85-218-24-1.dclient.lsne.ch (85.218.24.1) 11.162 ms 9.112 ms
> 9.720 ms
> 3 85.218.127.62 (85.218.127.62) 11.223 ms 19.309 ms 10.279 ms
> 4 v640.agr2.boi.lsne.ch (85.218.127.184) 9.153 ms 9.31 ms 11.182 ms
> 5 v600.cor1.boi.lsne.ch (85.218.127.49) 9.745 ms 7.526 ms 10.941 ms
> 6 te0-1-0-v301.brd0.gva.lsne.ch (85.218.127.98) 8.257 ms 10.514 ms
> 8.694 ms
> 7 r1gva1.core.init7.net (77.109.134.13) 8.834 ms 10.454 ms 8.536 ms
> 8 r1gva3.core.init7.net (77.109.128.62) 8.370 ms 13.973 ms 9.883 ms
> 9 r1qls1.core.init7.net (77.109.128.65) 12.585 ms 10.861 ms 9.948
> ms
> 10 r1ber1.core.init7.net (77.109.128.181) 11.43 ms 14.782 ms 10.186
> ms
> 11 r1zba1.core.init7.net (77.109.128.173) 11.921 ms 22.6 ms 12.307
> ms
> 12 r1zlz1.core.init7.net (77.109.128.229) 17.386 ms 13.428 ms 18.464
> ms
> 13 chzrh02.sixxs.net (213.144.148.74) 14.745 ms 14.990 ms 12.385 ms
>
> ######
>
> Did this work? [Y/n]
>
> ###### [4/8] Checking if we can ping IPv6 localhost (::1)
> ### This confirms if your IPv6 is working
> ### If ::1 doesn't reply then something is wrong with your IPv6 stack
>
> PING6(56=40+8+8 bytes) ::1 --> ::1
> ping6: sendmsg: No route to host
> ping6: wrote ::1 16 chars, ret=-1
> ping6: sendmsg: No route to host
> ping6: wrote ::1 16 chars, ret=-1
> ping6: sendmsg: No route to host
> ping6: wrote ::1 16 chars, ret=-1
>
> --- ::1 ping6 statistics ---
> 3 packets transmitted, 0 packets received, 100.0% packet loss
>
> ######
>
> Did this work? [Y/n] n
>
>
> # netstat -rn
> Routing tables
>
> Internet:
> Destination Gateway Flags Refs Use Mtu Prio
> Iface
> default 85.218.24.1 UGS 8 5141 - 8
> em1
> 85.218.24/24 link#2 UC 2 0 - 4
> em1
> 85.218.24.1 00:17:10:03:d0:d3 UHLc 1 0 - 4
> em1
> 85.218.24.18 127.0.0.1 UG 0 3 33196 56
> lo0
> 85.218.24.255 link#2 UHLc 2 55 - 4
> em1
> 127/8 127.0.0.1 UGRS 0 0 33196 8
> lo0
> 127.0.0.1 127.0.0.1 UH 4 648 33196 4
> lo0
> 192.168.10/24 192.168.10.2 UGS 0 0 - 8
> tun1
> 192.168.10.2 192.168.10.1 UH 1 0 - 4
> tun1
> 192.168.11/24 link#10 UC 3 0 - 4
> tun2
> 192.168.11.2 fe:e1:ba:d9:cd:92 UHLc 5 64 - 4
> tun2
> 192.168.11.3 link#10 UHLc 0 4 - 4
> tun2
> 192.168.11.255 link#10 UHLc 2 51 - 4
> tun2
> 192.168.12/24 link#11 UC 3 0 - 4
> tun3
> 192.168.12/24 192.168.11.2 UG 0 0 - 48
> tun2
> 192.168.12.1 fe:e1:ba:d3:ac:2c UHLc 1 64 - 4
> tun3
> 192.168.12.8 link#11 UHLc 0 4 - 4
> tun3
> 192.168.12.255 link#11 UHLc 2 51 - 4
> tun3
> 192.168.30/24 192.168.11.2 UG 0 675 - 48
> tun2
> 192.168.31/24 192.168.11.2 UG 0 0 - 48
> tun2
> 192.168.50/24 link#1 UC 4 0 - 4
> em0
> 192.168.50.1 00:22:4d:88:5c:4f UHLc 1 178 - 4
> lo0
> 192.168.50.9 78:dd:08:f7:73:75 UHLc 2 3401 - 4
> em0
> 192.168.50.13 98:4b:4a:51:eb:a2 UHLc 0 233 - 4
> em0
> 192.168.50.255 link#1 UHLc 2 55 - 4
> em0
> 224/4 127.0.0.1 URS 0 0 33196 8
> lo0
>
> Internet6:
> Destination Gateway Flags
> Refs Use Mtu Prio Iface
> ::/104 ::1 UGRS
> 0 0 - 8 lo0
> ::/96 ::1 UGRS
> 0 0 - 8 lo0
> default 2001:1620:f00:56::1 GS
> 0 0 - 8 gif0
> ::1 ::1 UH
> 14 0 33196 4 lo0
> ::127.0.0.0/104 ::1 UGRS
> 0 0 - 8 lo0
> ::224.0.0.0/100 ::1 UGRS
> 0 0 - 8 lo0
> ::255.0.0.0/104 ::1 UGRS
> 0 0 - 8 lo0
> ::ffff:0.0.0.0/96 ::1 UGRS
> 0 0 - 8 lo0
> 2001:1620:f00:56::1 2001:1620:f00:56::2 H
> 1 0 - 4 gif0
> 2001:1620:f00:56::2 link#8 UHL
> 0 0 - 4 lo0
> 2001:1620:f2e:1::/64 link#1 UC
> 0 0 - 4 em0
> 2002::/24 ::1 UGRS
> 0 0 - 8 lo0
> 2002:7f00::/24 ::1 UGRS
> 0 0 - 8 lo0
> 2002:e000::/20 ::1 UGRS
> 0 0 - 8 lo0
> 2002:ff00::/24 ::1 UGRS
> 0 0 - 8 lo0
> fe80::/10 ::1 UGRS
> 0 0 - 8 lo0
> fe80::%em0/64 link#1 UC
> 0 0 - 4 em0
> fe80::%em1/64 link#2 UC
> 0 0 - 4 em1
> fe80::%lo0/64 fe80::1%lo0 U
> 0 0 - 4 lo0
> fe80::1%lo0 link#4 UHL
> 0 0 - 4 lo0
> fe80::%gif0/64 link#8 C
> 0 0 - 4 gif0
> fe80::222:4dff:fe88:5c4f%gif0 link#8 UHL
> 0 0 - 4 lo0
> fe80::%tun2/64 link#10 UC
> 0 0 - 4 tun2
> fe80::fce1:baff:fed4:f868%tun2 fe:e1:ba:d4:f8:68 HL
> 0 0 - 4 lo0
> fe80::%tun3/64 link#11 UC
> 0 0 - 4 tun3
> fe80::fce1:baff:fed6:d687%tun3 fe:e1:ba:d6:d6:87 HL
> 0 0 - 4 lo0
> fec0::/10 ::1 UGRS
> 0 0 - 8 lo0
> ff01::/16 ::1 UGRS
> 0 0 - 8 lo0
> ff01::%em0/32 link#1 UC
> 0 0 - 4 em0
> ff01::%em1/32 link#2 UC
> 0 0 - 4 em1
> ff01::%lo0/32 fe80::1%lo0 UC
> 0 0 - 4 lo0
> ff01::%gif0/32 link#8 C
> 0 0 - 4 gif0
> ff01::%tun2/32 link#10 UC
> 0 0 - 4 tun2
> ff01::%tun3/32 link#11 UC
> 0 0 - 4 tun3
> ff02::/16 ::1 UGRS
> 4 0 - 8 lo0
> ff02::%em0/32 link#1 UC
> 0 0 - 4 em0
> ff02::%em1/32 link#2 UC
> 0 0 - 4 em1
> ff02::%lo0/32 fe80::1%lo0 UC
> 0 0 - 4 lo0
> ff02::%gif0/32 link#8 C
> 0 0 - 4 gif0
> ff02::%tun2/32 link#10 UC
> 0 0 - 4 tun2
> ff02::%tun3/32 link#11 UC
> 0 0 - 4 tun3
>
> Encap:
> Source Port Destination Port Proto
> SA(Address/Proto/Type/Direction)
> default 0 default
> 0 0 none/esp/deny/out
>
>
> # sysctl -a | grep inet6
> net.inet6.ip6.forwarding=1
> net.inet6.ip6.redirect=1
> net.inet6.ip6.hlim=64
> net.inet6.ip6.mrtproto=103
> net.inet6.ip6.maxfragpackets=200
> net.inet6.ip6.accept_rtadv=0
> net.inet6.ip6.keepfaith=0
> net.inet6.ip6.log_interval=5
> net.inet6.ip6.hdrnestlimit=10
> net.inet6.ip6.dad_count=1
> net.inet6.ip6.auto_flowlabel=1
> net.inet6.ip6.defmcasthlim=1
> net.inet6.ip6.kame_version=OpenBSD-current
> net.inet6.ip6.use_deprecated=1
> net.inet6.ip6.rr_prune=5
> net.inet6.ip6.v6only=1
> net.inet6.ip6.maxfrags=200
> net.inet6.ip6.mforwarding=1
> net.inet6.ip6.multipath=0
> net.inet6.ip6.multicast_mtudisc=0
> net.inet6.ip6.neighborgcthresh=2048
> net.inet6.ip6.maxifprefixes=16
> net.inet6.ip6.maxifdefrouters=16
> net.inet6.ip6.maxdynroutes=4096
> net.inet6.ip6.dad_pending=0
> net.inet6.icmp6.rediraccept=0
> net.inet6.icmp6.redirtimeout=600
> net.inet6.icmp6.nd6_prune=1
> net.inet6.icmp6.nd6_delay=5
> net.inet6.icmp6.nd6_umaxtries=3
> net.inet6.icmp6.nd6_mmaxtries=3
> net.inet6.icmp6.nd6_useloopback=1
> net.inet6.icmp6.nodeinfo=1
> net.inet6.icmp6.errppslimit=100
> net.inet6.icmp6.nd6_maxnudhint=0
> net.inet6.icmp6.mtudisc_hiwat=1280
> net.inet6.icmp6.mtudisc_lowat=256
> net.inet6.icmp6.nd6_debug=0
> net.inet6.divert.recvspace=65636
> net.inet6.divert.sendspace=65636
