Addendum, my pf ruleset: match in all scrub (no-df max-mss 1440) anchor "ftp-proxy/*" all anchor "relayd/*" all match out on em1 from ! (em1) to any nat-to (em1) round-robin match in on em0 inet proto tcp from any to (em0) port = 21 rdr-to 127.0.0.1 port 8021 match in on em0 inet proto tcp from any to (em0) port = 80 rdr-to 127.0.0.1 port 3128 match in on em1 inet proto tcp from any to (em1) port = 2027 rdr-to 192.168.50.9 port 2027 match in on em1 inet proto tcp from any to (em1) port = 46411 rdr-to 192.168.50.9 port 46411 match in on em1 inet proto udp from any to (em1) port = 46411 rdr-to 192.168.50.9 port 46411 match in on em1 inet proto tcp from any to (em1) port = 25 rdr-to 127.0.0.1 port 8025 block drop in log all pass out all flags S/SA keep state (if-bound) anchor "ftp-proxy/*" all block drop in log on em1 from <ssh-violations> to any block drop in log on gif0 from <ssh-violations> to any block drop out on em1 proto udp from any to any port = 631 pass quick on em1 inet proto ipencap all keep state (if-bound) pass quick on em1 inet proto ipv6 all keep state (if-bound) pass in quick on gif0 inet6 proto ipv6-icmp from 2001:1620:f00:56::1 to 2001:1620:f00:56::2 keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 1194 keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 1196 keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 5003 keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 5501 keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 7777 keep state (if-bound) pass in on em1 inet proto udp from 80.83.41.48 to 85.218.24.18 port = 500 keep state (if-bound) pass in on em1 inet proto udp from 80.83.41.48 to 85.218.24.18 port = 4500 keep state (if-bound) pass in on gif0 proto udp from any to (gif0) port = 1196 keep state (if-bound) pass in on gif0 proto udp from any to (gif0) port = 5003 keep state (if-bound) pass in on gif0 proto udp from any to (gif0) port = 5501 keep state (if-bound) pass in on gif0 proto udp from any to (gif0) port = 7777 keep state (if-bound) pass in on em1 inet proto esp from 80.83.41.48 to 85.218.24.18 keep state (if-bound) pass in on em1 inet proto ah from 80.83.41.48 to 85.218.24.18 keep state (if-bound) pass in on enc0 inet proto ipencap from 80.83.41.48 to 85.218.24.18 keep state (if-bound) pass in inet proto icmp all icmp-type echoreq keep state (if-bound) pass in on enc0 inet from 192.168.30.0/23 to 192.168.50.0/24 flags S/SA keep state (if-bound) pass in on em1 proto tcp from any to (em1) port 2027:2037 flags S/SA keep state (if-bound) pass in on gif0 proto tcp from any to (gif0) port 2027:2037 flags S/SA keep state (if-bound) pass out on em1 inet proto udp from 85.218.24.18 to 80.83.41.48 port = 500 keep state (if-bound) pass out on em1 inet proto udp from 85.218.24.18 to 80.83.41.48 port = 4500 keep state (if-bound) pass out on em1 inet proto esp from 85.218.24.18 to 80.83.41.48 keep state (if-bound) pass out on em1 inet proto ah from 85.218.24.18 to 80.83.41.48 keep state (if-bound) pass out on enc0 inet proto ipencap from 85.218.24.18 to 80.83.41.48 keep state (if-bound) pass out on enc0 inet from 192.168.50.0/24 to 192.168.30.0/23 flags S/SA keep state (if-bound) pass in log on em1 proto tcp from any to (em1) port = 22 flags S/SA synproxy state (source-track rule, max-src-conn-rate 3/30, overload <ssh-violations> flush global, if-bound, src.track 30) pass in log on gif0 proto tcp from any to (gif0) port = 22 flags S/SA synproxy state (source-track rule, max-src-conn-rate 3/30, overload <ssh-violations> flush global, if-bound, src.track 30) pass in log on em1 proto tcp from any to (em1) port = 25 flags S/SA keep state (if-bound) pass out log on em1 proto tcp from (em1) to any port = 25 flags S/SA keep state (if-bound) pass in on em1 proto tcp from any to any port = 46411 no state pass in on em1 proto udp from any to any port = 46411 no state pass proto ipv6 all keep state (if-bound) pass in on em1 proto udp from any to (em1) port = 37465 keep state (if-bound) pass out on em0 all no state pass in on em0 all flags S/SA keep state (if-bound) pass quick on tun1 all no state pass quick on tun2 all no state pass quick on tun3 all no state pass quick inet from 224.0.0.0/7 to any flags S/SA keep state (if-bound)
On Sat, 2013-05-04 at 16:49 +0200, Nothingness wrote: > Hi all, > > Upgraded from 5.2 to 5.3 i386, using my usual config I've had for a > number of years. Unfortunately I cannot ping6 a single thing, not even > localhost, and bgpd (patched with the March 15th patch) won't start via > rc.conf.local (all other daemons work). I've tried reinstalling the > kernel from a different mirror, troubleshooting with aiccu, and can't > find any real reason for this. Up till now this configuration worked > just fine, never a hitch (over a number of years). Hopefully someone has > a suggestion? > > Cheers, > > Noth > > > See below for dmesg, aiccu test, netstat -rn & sysctl -a | grep inet6 > > OpenBSD 5.3 (GENERIC.MP) #58: Tue Mar 12 18:43:53 MDT 2013 > dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP > RTC BIOS diagnostic error 80<clock_battery> > cpu0: Intel(R) Atom(TM) CPU D2500 @ 1.86GHz ("GenuineIntel" 686-class) > 1.87 GHz > cpu0: > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC > real mem = 3471089664 (3310MB) > avail mem = 3403386880 (3245MB) > mainbus0 at root > bios0 at mainbus0: AT/286+ BIOS, date 03/23/12, SMBIOS rev. 2.7 @ > 0xceebd000 (28 entries) > bios0: vendor Intel Corp. version "CCCDT10N.86A.0032.2012.0323.1510" > date 03/23/2012 > bios0: Intel Corporation D2500CC > acpi0 at bios0: rev 2 > acpi0: sleep states S0 S3 S4 S5 > acpi0: tables DSDT FACP SSDT APIC MCFG HPET > acpi0: wakeup devices SLT1(S4) PS2M(S4) PS2K(S4) UAR1(S3) UAR2(S3) > UAR3(S4) UAR4(S4) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB7(S3) PXSX(S4) > RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PWRB(S4) > acpitimer0 at acpi0: 3579545 Hz, 24 bits > acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat > cpu0 at mainbus0: apid 0 (boot processor) > cpu0: apic clock running at 133MHz > cpu1 at mainbus0: apid 1 (application processor) > cpu1: Intel(R) Atom(TM) CPU D2500 @ 1.86GHz ("GenuineIntel" 686-class) > 1.87 GHz > cpu1: > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC > ioapic0 at mainbus0: apid 8 pa 0xfec00000, version 20, 24 pins > ioapic0: misconfigured as apic 0, remapped to apid 8 > acpimcfg0 at acpi0 addr 0xe0000000, bus 0-63 > acpihpet0 at acpi0: 14318179 Hz > acpiprt0 at acpi0: bus 0 (PCI0) > acpiprt1 at acpi0: bus 3 (P0P1) > acpiprt2 at acpi0: bus 2 (RP01) > acpiprt3 at acpi0: bus 1 (RP02) > acpiprt4 at acpi0: bus -1 (RP03) > acpiprt5 at acpi0: bus -1 (RP04) > acpicpu0 at acpi0 > acpicpu1 at acpi0 > acpibtn0 at acpi0: PWRB > acpibtn1 at acpi0: SLPB > acpivideo0 at acpi0: GFX0 > acpivout0 at acpivideo0: DD02 > bios0: ROM list: 0xc0000/0xf400! > pci0 at mainbus0 bus 0: configuration mode 1 (bios) > pchb0 at pci0 dev 0 function 0 "Intel Atom D2000/N2000 Host" rev 0x03 > vga1 at pci0 dev 2 function 0 "Intel Atom D2000/N2000 Video" rev 0x09 > wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) > wsdisplay0: screen 1-5 added (80x25, vt100 emulation) > intagp at vga1 not configured > azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi > azalia0: codecs: Realtek ALC888 > audio0 at azalia0 > ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 8 int > 16 > pci1 at ppb0 bus 2 > em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi, > address 00:22:4d:88:5c:4f > ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 8 int > 17 > pci2 at ppb1 bus 1 > em1 at pci2 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi, > address 00:22:4d:88:5c:52 > uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 8 int > 23 > uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 8 int > 19 > uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 8 int > 18 > uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 8 int > 16 > ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 8 int > 23 > usb0 at ehci0: USB revision 2.0 > uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 > ppb2 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xe2 > pci3 at ppb2 bus 3 > pcib0 at pci0 dev 31 function 0 "Intel NM10 LPC" rev 0x02 > ahci0 at pci0 dev 31 function 2 "Intel 82801GR AHCI" rev 0x02: msi, AHCI > 1.1 > scsibus0 at ahci0: 32 targets > sd0 at scsibus0 targ 0 lun 0: <ATA, WDC WD10JPVT-22A, 01.0> SCSI3 > 0/direct fixed naa.50014ee6ad7915f1 > sd0: 953869MB, 512 bytes/sector, 1953525168 sectors > sd1 at scsibus0 targ 1 lun 0: <ATA, WDC WD10JPVT-22A, 01.0> SCSI3 > 0/direct fixed naa.50014ee65823f816 > sd1: 953869MB, 512 bytes/sector, 1953525168 sectors > ichiic0 at pci0 dev 31 function 3 "Intel 82801GB SMBus" rev 0x02: apic 8 > int 19 > iic0 at ichiic0 > lm1 at iic0 addr 0x2d: W83627DHG > spdmem0 at iic0 addr 0x50: 2GB DDR3 SDRAM PC3-8500 SO-DIMM > spdmem1 at iic0 addr 0x51: 2GB DDR3 SDRAM PC3-8500 SO-DIMM > usb1 at uhci0: USB revision 1.0 > uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > usb2 at uhci1: USB revision 1.0 > uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > usb3 at uhci2: USB revision 1.0 > uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > usb4 at uhci3: USB revision 1.0 > uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > isa0 at pcib0 > isadma0 at isa0 > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo > com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > wbsio0 at isa0 port 0x2e/2: W83627UHG rev 0x32 > lm2 at wbsio0 port 0x290/8: W83627DHG > npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 > mtrr: Pentium Pro MTRR support > lm1: disabling sensors due to alias with lm2 > uhidev0 at uhub2 port 1 configuration 1 interface 0 "Logitech Logitech > USB Keyboard" rev 1.10/28.00 addr 2 > uhidev0: iclass 3/1 > ukbd0 at uhidev0: 8 variable keys, 6 key codes > wskbd0 at ukbd0: console keyboard, using wsdisplay0 > vscsi0 at root > scsibus1 at vscsi0: 256 targets > softraid0 at root > scsibus2 at softraid0: 256 targets > sd2 at scsibus2 targ 1 lun 0: <OPENBSD, SR RAID 1, 005> SCSI2 0/direct > fixed > sd2: 931338MB, 512 bytes/sector, 1907380720 sectors > root on sd0a (f4957e152fc76b0f.a) swap on sd0b dump on sd0b > > > # aiccu test > Tunnel Information for T30693: > POP Id : chzrh02 > IPv6 Local : 2001:1620:f00:56::2/64 > IPv6 Remote : 2001:1620:f00:56::1/64 > Tunnel Type : 6in4-heartbeat > Adminstate : enabled > Userstate : enabled > ifconfig: SIOCAIFADDR: File exists > route: writing to routing socket: File exists > add net default: gateway 2001:1620:f00:56::1: File exists > ####### > ####### AICCU Quick Connectivity Test > ####### > > ####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (85.218.24.18) > ### This should return so called 'echo replies' > ### If it doesn't then check your firewall settings > ### Your local endpoint should always be pingable > ### It could also indicate problems with your IPv4 stack > > PING 85.218.24.18 (85.218.24.18): 56 data bytes > 64 bytes from 85.218.24.18: icmp_seq=0 ttl=255 time=0.202 ms > 64 bytes from 85.218.24.18: icmp_seq=1 ttl=255 time=0.078 ms > 64 bytes from 85.218.24.18: icmp_seq=2 ttl=255 time=0.080 ms > --- 85.218.24.18 ping statistics --- > 3 packets transmitted, 3 packets received, 0.0% packet loss > round-trip min/avg/max/std-dev = 0.078/0.120/0.202/0.057 ms > > ###### > > Did this work? [Y/n] > > ####### [2/8] Ping the IPv4 Remote/PoP Outer Endpoint (213.144.148.74) > ### These pings should reach the PoP and come back to you > ### In case there are problems along the route between your > ### host and the PoP this could not return replies > ### Check your firewall settings if problems occur > > PING 213.144.148.74 (213.144.148.74): 56 data bytes > 64 bytes from 213.144.148.74: icmp_seq=0 ttl=53 time=17.141 ms > 64 bytes from 213.144.148.74: icmp_seq=1 ttl=53 time=13.464 ms > 64 bytes from 213.144.148.74: icmp_seq=2 ttl=53 time=12.887 ms > --- 213.144.148.74 ping statistics --- > 3 packets transmitted, 3 packets received, 0.0% packet loss > round-trip min/avg/max/std-dev = 12.887/14.497/17.141/1.886 ms > > ###### > > Did this work? [Y/n] > > ####### [3/8] Traceroute to the PoP (213.144.148.74) over IPv4 > ### This traceroute should reach the PoP > ### In case this traceroute fails then you have no connectivity > ### to the PoP and this is most probably the problem > > traceroute to 213.144.148.74 (213.144.148.74), 64 hops max, 40 byte > packets > 1 192.168.0.1 (192.168.0.1) 0.452 ms 0.227 ms 0.187 ms > 2 85-218-24-1.dclient.lsne.ch (85.218.24.1) 11.162 ms 9.112 ms > 9.720 ms > 3 85.218.127.62 (85.218.127.62) 11.223 ms 19.309 ms 10.279 ms > 4 v640.agr2.boi.lsne.ch (85.218.127.184) 9.153 ms 9.31 ms 11.182 ms > 5 v600.cor1.boi.lsne.ch (85.218.127.49) 9.745 ms 7.526 ms 10.941 ms > 6 te0-1-0-v301.brd0.gva.lsne.ch (85.218.127.98) 8.257 ms 10.514 ms > 8.694 ms > 7 r1gva1.core.init7.net (77.109.134.13) 8.834 ms 10.454 ms 8.536 ms > 8 r1gva3.core.init7.net (77.109.128.62) 8.370 ms 13.973 ms 9.883 ms > 9 r1qls1.core.init7.net (77.109.128.65) 12.585 ms 10.861 ms 9.948 > ms > 10 r1ber1.core.init7.net (77.109.128.181) 11.43 ms 14.782 ms 10.186 > ms > 11 r1zba1.core.init7.net (77.109.128.173) 11.921 ms 22.6 ms 12.307 > ms > 12 r1zlz1.core.init7.net (77.109.128.229) 17.386 ms 13.428 ms 18.464 > ms > 13 chzrh02.sixxs.net (213.144.148.74) 14.745 ms 14.990 ms 12.385 ms > > ###### > > Did this work? [Y/n] > > ###### [4/8] Checking if we can ping IPv6 localhost (::1) > ### This confirms if your IPv6 is working > ### If ::1 doesn't reply then something is wrong with your IPv6 stack > > PING6(56=40+8+8 bytes) ::1 --> ::1 > ping6: sendmsg: No route to host > ping6: wrote ::1 16 chars, ret=-1 > ping6: sendmsg: No route to host > ping6: wrote ::1 16 chars, ret=-1 > ping6: sendmsg: No route to host > ping6: wrote ::1 16 chars, ret=-1 > > --- ::1 ping6 statistics --- > 3 packets transmitted, 0 packets received, 100.0% packet loss > > ###### > > Did this work? [Y/n] n > > > # netstat -rn > Routing tables > > Internet: > Destination Gateway Flags Refs Use Mtu Prio > Iface > default 85.218.24.1 UGS 8 5141 - 8 > em1 > 85.218.24/24 link#2 UC 2 0 - 4 > em1 > 85.218.24.1 00:17:10:03:d0:d3 UHLc 1 0 - 4 > em1 > 85.218.24.18 127.0.0.1 UG 0 3 33196 56 > lo0 > 85.218.24.255 link#2 UHLc 2 55 - 4 > em1 > 127/8 127.0.0.1 UGRS 0 0 33196 8 > lo0 > 127.0.0.1 127.0.0.1 UH 4 648 33196 4 > lo0 > 192.168.10/24 192.168.10.2 UGS 0 0 - 8 > tun1 > 192.168.10.2 192.168.10.1 UH 1 0 - 4 > tun1 > 192.168.11/24 link#10 UC 3 0 - 4 > tun2 > 192.168.11.2 fe:e1:ba:d9:cd:92 UHLc 5 64 - 4 > tun2 > 192.168.11.3 link#10 UHLc 0 4 - 4 > tun2 > 192.168.11.255 link#10 UHLc 2 51 - 4 > tun2 > 192.168.12/24 link#11 UC 3 0 - 4 > tun3 > 192.168.12/24 192.168.11.2 UG 0 0 - 48 > tun2 > 192.168.12.1 fe:e1:ba:d3:ac:2c UHLc 1 64 - 4 > tun3 > 192.168.12.8 link#11 UHLc 0 4 - 4 > tun3 > 192.168.12.255 link#11 UHLc 2 51 - 4 > tun3 > 192.168.30/24 192.168.11.2 UG 0 675 - 48 > tun2 > 192.168.31/24 192.168.11.2 UG 0 0 - 48 > tun2 > 192.168.50/24 link#1 UC 4 0 - 4 > em0 > 192.168.50.1 00:22:4d:88:5c:4f UHLc 1 178 - 4 > lo0 > 192.168.50.9 78:dd:08:f7:73:75 UHLc 2 3401 - 4 > em0 > 192.168.50.13 98:4b:4a:51:eb:a2 UHLc 0 233 - 4 > em0 > 192.168.50.255 link#1 UHLc 2 55 - 4 > em0 > 224/4 127.0.0.1 URS 0 0 33196 8 > lo0 > > Internet6: > Destination Gateway Flags > Refs Use Mtu Prio Iface > ::/104 ::1 UGRS > 0 0 - 8 lo0 > ::/96 ::1 UGRS > 0 0 - 8 lo0 > default 2001:1620:f00:56::1 GS > 0 0 - 8 gif0 > ::1 ::1 UH > 14 0 33196 4 lo0 > ::127.0.0.0/104 ::1 UGRS > 0 0 - 8 lo0 > ::224.0.0.0/100 ::1 UGRS > 0 0 - 8 lo0 > ::255.0.0.0/104 ::1 UGRS > 0 0 - 8 lo0 > ::ffff:0.0.0.0/96 ::1 UGRS > 0 0 - 8 lo0 > 2001:1620:f00:56::1 2001:1620:f00:56::2 H > 1 0 - 4 gif0 > 2001:1620:f00:56::2 link#8 UHL > 0 0 - 4 lo0 > 2001:1620:f2e:1::/64 link#1 UC > 0 0 - 4 em0 > 2002::/24 ::1 UGRS > 0 0 - 8 lo0 > 2002:7f00::/24 ::1 UGRS > 0 0 - 8 lo0 > 2002:e000::/20 ::1 UGRS > 0 0 - 8 lo0 > 2002:ff00::/24 ::1 UGRS > 0 0 - 8 lo0 > fe80::/10 ::1 UGRS > 0 0 - 8 lo0 > fe80::%em0/64 link#1 UC > 0 0 - 4 em0 > fe80::%em1/64 link#2 UC > 0 0 - 4 em1 > fe80::%lo0/64 fe80::1%lo0 U > 0 0 - 4 lo0 > fe80::1%lo0 link#4 UHL > 0 0 - 4 lo0 > fe80::%gif0/64 link#8 C > 0 0 - 4 gif0 > fe80::222:4dff:fe88:5c4f%gif0 link#8 UHL > 0 0 - 4 lo0 > fe80::%tun2/64 link#10 UC > 0 0 - 4 tun2 > fe80::fce1:baff:fed4:f868%tun2 fe:e1:ba:d4:f8:68 HL > 0 0 - 4 lo0 > fe80::%tun3/64 link#11 UC > 0 0 - 4 tun3 > fe80::fce1:baff:fed6:d687%tun3 fe:e1:ba:d6:d6:87 HL > 0 0 - 4 lo0 > fec0::/10 ::1 UGRS > 0 0 - 8 lo0 > ff01::/16 ::1 UGRS > 0 0 - 8 lo0 > ff01::%em0/32 link#1 UC > 0 0 - 4 em0 > ff01::%em1/32 link#2 UC > 0 0 - 4 em1 > ff01::%lo0/32 fe80::1%lo0 UC > 0 0 - 4 lo0 > ff01::%gif0/32 link#8 C > 0 0 - 4 gif0 > ff01::%tun2/32 link#10 UC > 0 0 - 4 tun2 > ff01::%tun3/32 link#11 UC > 0 0 - 4 tun3 > ff02::/16 ::1 UGRS > 4 0 - 8 lo0 > ff02::%em0/32 link#1 UC > 0 0 - 4 em0 > ff02::%em1/32 link#2 UC > 0 0 - 4 em1 > ff02::%lo0/32 fe80::1%lo0 UC > 0 0 - 4 lo0 > ff02::%gif0/32 link#8 C > 0 0 - 4 gif0 > ff02::%tun2/32 link#10 UC > 0 0 - 4 tun2 > ff02::%tun3/32 link#11 UC > 0 0 - 4 tun3 > > Encap: > Source Port Destination Port Proto > SA(Address/Proto/Type/Direction) > default 0 default > 0 0 none/esp/deny/out > > > # sysctl -a | grep inet6 > net.inet6.ip6.forwarding=1 > net.inet6.ip6.redirect=1 > net.inet6.ip6.hlim=64 > net.inet6.ip6.mrtproto=103 > net.inet6.ip6.maxfragpackets=200 > net.inet6.ip6.accept_rtadv=0 > net.inet6.ip6.keepfaith=0 > net.inet6.ip6.log_interval=5 > net.inet6.ip6.hdrnestlimit=10 > net.inet6.ip6.dad_count=1 > net.inet6.ip6.auto_flowlabel=1 > net.inet6.ip6.defmcasthlim=1 > net.inet6.ip6.kame_version=OpenBSD-current > net.inet6.ip6.use_deprecated=1 > net.inet6.ip6.rr_prune=5 > net.inet6.ip6.v6only=1 > net.inet6.ip6.maxfrags=200 > net.inet6.ip6.mforwarding=1 > net.inet6.ip6.multipath=0 > net.inet6.ip6.multicast_mtudisc=0 > net.inet6.ip6.neighborgcthresh=2048 > net.inet6.ip6.maxifprefixes=16 > net.inet6.ip6.maxifdefrouters=16 > net.inet6.ip6.maxdynroutes=4096 > net.inet6.ip6.dad_pending=0 > net.inet6.icmp6.rediraccept=0 > net.inet6.icmp6.redirtimeout=600 > net.inet6.icmp6.nd6_prune=1 > net.inet6.icmp6.nd6_delay=5 > net.inet6.icmp6.nd6_umaxtries=3 > net.inet6.icmp6.nd6_mmaxtries=3 > net.inet6.icmp6.nd6_useloopback=1 > net.inet6.icmp6.nodeinfo=1 > net.inet6.icmp6.errppslimit=100 > net.inet6.icmp6.nd6_maxnudhint=0 > net.inet6.icmp6.mtudisc_hiwat=1280 > net.inet6.icmp6.mtudisc_lowat=256 > net.inet6.icmp6.nd6_debug=0 > net.inet6.divert.recvspace=65636 > net.inet6.divert.sendspace=65636