* ip6tables --set-mark drops/distorts link-local packets
@ 2016-06-03 1:38 Georgios Amanakis
0 siblings, 0 replies; 2+ messages in thread
From: Georgios Amanakis @ 2016-06-03 1:38 UTC (permalink / raw)
To: lartc
Hi all,
I discovered that marking IPv6 packets with ip6tables results in link-
local traffic being dropped/distorted. Specifically link-local UDP
traffic on ports 546-547 (necessary for DHCPv6) fails in this
situation. I provide a script for testing purposes:
-----------8<------------
#!/usr/bin/sh
ip6tables -t mangle -FÂ
ip6tables -t mangle -A OUTPUT -o $oif -j MARK --set-mark 3
exit 0
-----------8<------------
Is this behavior known/expected? My search didn't reveal any relevant
results on the web.
I am running Archlinux, uname -a:
"Linux a-router 4.4.11-1-lts #1 SMP Thu May 19 21:03:24 CEST 2016
x86_64 GNU/Linux"
George
^ permalink raw reply [flat|nested] 2+ messages in thread
* ip6tables --set-mark drops/distorts link-local packets
@ 2016-06-03 16:09 Georgios Amanakis
0 siblings, 0 replies; 2+ messages in thread
From: Georgios Amanakis @ 2016-06-03 16:09 UTC (permalink / raw)
To: netfilter
Hi all,
I have already posted this in the lartc mailing list but I think the
netfilter one is more suitable.
I discovered that marking IPv6 packets with ip6tables results in link-
local traffic being dropped/distorted. Specifically link-local UDP
traffic on ports 546-547 (necessary for DHCPv6) fails in this
situation. I provide a script for testing purposes:
-----------8<------------
#!/usr/bin/sh
ip6tables -t mangle -F
ip6tables -t mangle -A OUTPUT -o $oif -j MARK --set-mark 3
exit 0
-----------8<------------
Is this behavior known/expected? My search didn't reveal any relevant
results on the web.
I am running Archlinux, uname -a:
"Linux a-router 4.4.11-1-lts #1 SMP Thu May 19 21:03:24 CEST 2016
x86_64 GNU/Linux"
George
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-06-03 16:09 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-06-03 1:38 ip6tables --set-mark drops/distorts link-local packets Georgios Amanakis
2016-06-03 16:09 Georgios Amanakis
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.