Bug #11095
closedpfSense will not reply to NS on WAN where src is set to a global IPv6 address
0%
Description
The category for this should probably be NDP, but that category is not available.
pfSense will not reply with an NA to an NS request that arrives on the WAN interface (not tested on other types of interfaces), if the IPv6 source address is a global IPv6 address.
pfSense will reply with and NA to an NS request that arrives on the WAN interface, if the IPv6 source address is a local-link address (fe80::)
I have attached 4 files which shows a minimal example.
working.pcap: A single hand-crafted package, that pfSense WILL reply to.
working-pfsense-WAN.pcap: A package capture from pfSense WAN interface, when the package is sent from another machine, as you can see this capture contain an NA response from pfSense.
not-working.pcap: A single hand-crafted package, that pfSense WILL NOT reply to.
not-working-pfsense-WAN.pcap: A package capture from pfSense WAN interface, when the package is sent from another machine, as you can see this capture does not contain an NA response from pfSense.
Files