From owner-freebsd-stable@FreeBSD.ORG Tue Aug 12 11:31:24 2008 Return-Path: Delivered-To: stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 12B40106567B; Tue, 12 Aug 2008 11:31:24 +0000 (UTC) (envelope-from jdc@parodius.com) Received: from mx01.sc1.parodius.com (mx01.sc1.parodius.com [72.20.106.3]) by mx1.freebsd.org (Postfix) with ESMTP id 048ED8FC18; Tue, 12 Aug 2008 11:31:24 +0000 (UTC) (envelope-from jdc@parodius.com) Received: by mx01.sc1.parodius.com (Postfix, from userid 1000) id E48171CC0C0; Tue, 12 Aug 2008 04:31:23 -0700 (PDT) Date: Tue, 12 Aug 2008 04:31:23 -0700 From: Jeremy Chadwick To: Mathieu Arnold Message-ID: <20080812113123.GA9694@eos.sc1.parodius.com> References: <2D4221F0175C7261ECD00191@atuin.in.mat.cc> <20080812083403.GA2150@eos.sc1.parodius.com> <65391406E135A0EC389574BA@andromede.in.absolight.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <65391406E135A0EC389574BA@andromede.in.absolight.net> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: stable@FreeBSD.org Subject: Re: neighbor discovery problem X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2008 11:31:24 -0000 On Tue, Aug 12, 2008 at 01:17:27PM +0200, Mathieu Arnold wrote: > +-le 12.08.2008 01:34:03 -0700, Jeremy Chadwick a dit : > | Important note: I know absolutely nothing about IPv6. > | > | Do you have ACLs on any of these machines? !A in traceroute commonly > | means there's an ACL blocking said packets: > | > | !A (communication with destination network administratively prohibited) > | > | A ping from the other host might cause a stateful firewall to begin > | allowing said traffic to/from the machine which previously wasn't > | working. > | > | If you use a firewall on these machines (ipfw, pf, etc.), I'd recommend > | posting your problem to the freebsd-pf list instead. > > Hum, no, I've verified it already, there is pf enabled on the gateway, which > is also a firewall, but only on the external interface which does not come in > play here. That depends. Are you using "set skip" on non-external interfaces, or are you using pass rules to explicitly pass all traffic? Sorry if it sounds like I'm doubting you, but !A really looks like an ACL thing. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |