it's the correct spelling as in the man page and the example config file

Nope. Look again. We are not psychic, so we don't know what you
_actually_ have on your machine but instead can only go by what you
report. You _might_ have it spelled correctly on your machine, but
your initial e-mail has it misspelled. The fact you have it spelled
correctly in the previous e-mail leads me to think it is spelled
correctly on your machine, and you simply mistyped it in the e-mail.

reason=ROUTERADVERT
interface=pppoe0
protocol=ra
nd1_from=fe80::4afd:8eff:feaa:a4dd
nd1_acquired=821
nd1_now=1433
nd1_hoplimit=64
nd1_flags=O
nd1_lifetime=1800
nd1_source_address=48fd8eaaa4dd
nd1_mtu=1492
nd1_prefix_information1_length=64
nd1_prefix_information1_flags=LA
nd1_prefix_information1_vltime=259200
nd1_prefix_information1_pltime=172800
nd1_prefix_information1_prefix=2a02:8011:d000:57d::
nd1_addr1=2a02:8011:d000:57d:200::1/64

Mine looks a little different, but I am unsure if that matters. For
reference I have:

reason=ROUTERADVERT
interface=em0
protocol=ra
nd1_from=fe80::201:5cff:fe63:ee46
nd1_acquired=696307
nd1_now=696309
nd1_hoplimit=64
nd1_flags=MO
nd1_lifetime=1800
nd1_prefix_information1_length=64
nd1_prefix_information1_flags=
nd1_prefix_information1_vltime=604800
nd1_prefix_information1_pltime=302400
nd1_prefix_information1_prefix=2001:558:4070:83::

Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: carrier acquired
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: IAID 00:00:00:06
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: IA type 3 IAID
00:00:00:00
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: IA type 25 IAID
00:00:00:00
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: soliciting a DHCPv6
lease
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: soliciting an IPv6
router
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: Router Advertisement
from fe80::4afd:8eff:feaa:a4dd
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: adding address
2a02:8011:d000:57d:200::1/64
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: adding route to
2a02:8011:d000:57d::/64
Jan 22 16:05:15 imhotep dhcpcd[69138]: pppoe0: adding default route
via fe80::4afd:8eff:feaa:a4dd

Again, mine looks different even after ignoring the IPv4 info:

Jul  3 21:59:28 router dhcpcd[65819]: dhcpcd-9.4.1 starting
Jul  3 21:59:28 router dhcpcd[2832]: DUID
00:04:1c:02:1b:03:0d:04:e7:05:08:06:5c:07:00:08:00:09
Jul  3 21:59:28 router dhcpcd[2832]: no interfaces have a carrier
Jul  3 21:59:28 router dhcpcd[2832]: em0: waiting for carrier
Jul  3 21:59:28 router dhcpcd[2832]: em0: carrier acquired
Jul  3 21:59:28 router dhcpcd[2832]: em0: IAID 00:00:00:00
Jul  3 21:59:28 router dhcpcd[2832]: em0: soliciting a DHCPv6 lease
Jul  3 21:59:28 router dhcpcd[2832]: em0: soliciting an IPv6 router
Jul  3 21:59:28 router dhcpcd[2832]: em0: ADV
2001:558:6040:83:a99d:b51a:6dd1:632c/128 from fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: REPLY6 received from
fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding address
2001:558:6040:83:a99d:b51a:6dd1:632c/128
Jul  3 21:59:28 router dhcpcd[2832]: em0: renew in 1989, rebind in 2880,
expire in 3600 seconds
Jul  3 21:59:28 router dhcpcd[2832]: lo0: adding reject route to
2601:283:4403:ce80::/60 via ::1
Jul  3 21:59:28 router dhcpcd[2832]: em0: delegated prefix
2601:283:4403:ce80::/60
Jul  3 21:59:28 router dhcpcd[2832]: em0: soliciting a DHCP lease
Jul  3 21:59:28 router dhcpcd[2832]: em0: offered 71.229.183.31 from
96.113.84.152
Jul  3 21:59:28 router dhcpcd[2832]: em0: probing address
71.229.183.31/22
Jul  3 21:59:28 router dhcpcd[2832]: em0: Router Advertisement from
fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding route to
2001:558:4070:83::/64 via fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding route to
2001:558:5021:32::/64 via fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding route to
2001:558:6040:83::/64 via fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding route to
2001:558:803a:47::/64 via fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding default route via
fe80::201:5cff:fe63:ee46
Jul  3 21:59:28 router dhcpcd[2832]: em0: leased 71.229.183.31 for 3600
seconds
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding route to
71.229.180.0/22
Jul  3 21:59:28 router dhcpcd[2832]: em0: adding default route via
71.229.180.1

how should i simplify,
should i just remove the fe80::/10 ?

I simply have the following:

pass out quick inet6 proto icmp6 allow-opts
pass out quick
pass in quick inet6 proto icmp6 allow-opts
pass in quick on $wan inet6 proto udp to port 546 no state

This may be overly permissive for your needs though; but since you are
having trouble, it makes sense to at least try something that blocks
less traffic because you may be blocking more than you should. People
have gotten away with blocking ICMP for IPv4-without really knowing what
they are doing-but ICMPv6 is a lot more important to IPv6 and will
likely cause more problems. If this "magically" fixes your problem,
then you can iteratively block more traffic until you've reduced your
attack surface while still allowing for things to work properly.

Unfortunately, there is not much more help I can provide. I see you
had trouble in the past and even consulted Roy Marples
(https://roy.marples.name/archives/dhcpcd-discuss/0002604.html). If he
and Stuart Henderson cannot help, then I have no chance. Perhaps this
is just a problem with Zen like Stuart alluded to.

Good luck!

Reply via email to