[solved] IPv6 traffic to router itself blocked.

[guest24718]

Hi,

I'm fairly new to opnsense and I have a problem that I've been working on for a while:

I'm using TunnelBroker to set up an IPv6 tunnel using the gif interface following the steps in the doc. Everything else works: traffic to/from LAN from/to Internet and traffic from router to Internet; but except that all traffic to the router itself, from the Internet, is blocked, even if I explicitly allow all in/out ipv6 traffic of any protocol from any to any, on all the interfaces (so this should effectively disable the filter). Traffic from LAN to the router is OK.

Here "Internet" is actually another trusted TunnelBroker prefix but just for simplicity, let's assume I want to expose everything to the internet. Also, by "to the router itself", I mean to the LAN IPv6 address configured and to the client-end IPv6 of the tunnel. The strange thing is that, if I disable the firewall itself through the setting, all IPv6 traffic becomes OK (but I don't have NAT anymore, of course).

Any idea? 

[guest24718]

Alright,

I solved it myself: disable reply-to on all wan interfaces will do the trick.

But don't know exactly why...