Re: ICMPv6 and the conntrack table

2016-10-19 Thread Henrique de Moraes Holschuh
On Wed, Oct 19, 2016, at 13:42, Florian Pelgrim wrote: > Fun fact is that my provider is really using fe80::1 as default gateway. > And I know a lot more who are using the same technic when dealing with > IPv6 for customers. That will not end up well. -- "One disk to rule them all, One disk to

Re: ICMPv6 and the conntrack table

2016-10-19 Thread Florian Pelgrim
Hi, Am 09.10.16 um 09:54 schrieb Pascal Hambourg: > Le 08/10/2016 à 20:09, Florian Pelgrim a écrit : >> >> $ ip route get 2404:6800:400a:800::1012 >> 2404:6800:400a:800::1012 from :: via fe80::1 dev eth0 src >> fe80::d481:11ff:feee:4908 metric 0 > > This does not look like a correct setup to me

Re: ICMPv6 and the conntrack table

2016-10-19 Thread Florian Pelgrim
Hi, Am 08.10.16 um 23:19 schrieb Henrique de Moraes Holschuh: > On Sat, 08 Oct 2016, Florian Pelgrim wrote: >> This is the expected result without a firewall: >> $ ip route get 2404:6800:400a:800::1012 >> 2404:6800:400a:800::1012 from :: via fe80::1 dev eth0 src >> fe80::d481:11ff:feee:4908 metr

Re: ICMPv6 and the conntrack table

2016-10-09 Thread Pascal Hambourg
Le 08/10/2016 à 20:09, Florian Pelgrim a écrit : $ ip route get 2404:6800:400a:800::1012 2404:6800:400a:800::1012 from :: via fe80::1 dev eth0 src fe80::d481:11ff:feee:4908 metric 0 This does not look like a correct setup to me, unless the router performs source NAT (yuck!). A link local so

Re: ICMPv6 and the conntrack table

2016-10-08 Thread Henrique de Moraes Holschuh
On Sat, 08 Oct 2016, Florian Pelgrim wrote: > This is the expected result without a firewall: > $ ip route get 2404:6800:400a:800::1012 > 2404:6800:400a:800::1012 from :: via fe80::1 dev eth0 src > fe80::d481:11ff:feee:4908 metric 0 > cache hoplimit 64 Why do you have a default route via fe

ICMPv6 and the conntrack table

2016-10-08 Thread Florian Pelgrim
Hi, I'm currently playing with ip6tables and seeing some strange stuff which I not expected. I configure my servers with Ansible which is able to lookup my default IPv6 address. Therefore it uses `ip route get 2404:6800:400a:800::1012` and parses the output. Currently there is no IPv6 configured o