[Bug 280390] NPTv6 not working

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 23 Jul 2024 20:15:27 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280390

--- Comment #13 from cnbatch@gmail.com ---
With the configuration:

#!/bin/sh
ipfw -q -f flush
cmd="ipfw -q add "
ipfw disable one_pass
ipfw nptv6 NPT create int_prefix fdc9:281f:4d7:9ee9:: ext_if vtnet0 prefixlen
64
$cmd nptv6 NPT ip6 from any to any
$cmd allow icmp6 from any to any
$cmd allow icmp from any to any
$cmd allow ip6 from any to any via vtnet0
ipfw -q nat 1 config if vtnet0 same_ports unreg_only reset
$cmd nat 1 ip4 from any to any via vtnet0
$cmd allow all from any to any
$cmd check-state

captured:

20:10:52.345074 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:53.380628 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:54.265688 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:54.265698 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:54.266375 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:54.266383 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:54.266386 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:54.404592 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:54.466137 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:54.466151 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:54.466769 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:54.466846 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:54.466907 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:54.481396 IP6 2a05:f480:1c00:2c:8ef7::2 > 2610:1c1:1:606c::50:15: ICMP6,
echo request, id 1205, seq 0, length 16
20:10:54.766084 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:54.766095 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:54.766765 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:54.767361 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:54.767371 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:55.216168 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:55.216178 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:55.216832 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:55.217422 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:55.217431 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:55.505021 IP6 2a05:f480:1c00:2c:8ef7::2 > 2610:1c1:1:606c::50:15: ICMP6,
echo request, id 1205, seq 1, length 16
20:10:55.583522 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:55.892051 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:55.892063 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:55.892079 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:55.892085 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:55.892088 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:56.514639 IP6 2a05:f480:1c00:2c:8ef7::2 > 2610:1c1:1:606c::50:15: ICMP6,
echo request, id 1205, seq 2, length 16
20:10:56.644610 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:56.902689 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:56.902701 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:56.903305 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:56.903370 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:56.903435 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:56.964610 IP6 fe80::fc00:5ff:fe07:578d > fe80::5400:5ff:fe07:578d: ICMP6,
neighbor solicitation, who has fe80::5400:5ff:fe07:578d, length 32
20:10:56.964645 IP6 fe80::5400:5ff:fe07:578d > fe80::fc00:5ff:fe07:578d: ICMP6,
neighbor advertisement, tgt is fe80::5400:5ff:fe07:578d, length 24
20:10:57.525159 IP6 2a05:f480:1c00:2c:8ef7::2 > 2610:1c1:1:606c::50:15: ICMP6,
echo request, id 1205, seq 3, length 16
20:10:57.668609 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:58.421353 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:10:58.421368 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:10:58.422080 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:10:58.422095 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:10:58.422177 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:10:58.944557 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:10:59.972594 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:00.698378 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:11:00.698389 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:11:00.699086 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:11:00.699251 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:11:00.699256 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:11:00.996628 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:04.112853 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:11:04.112865 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:11:04.114562 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:11:04.114599 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:11:04.114607 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:11:04.135448 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:05.156656 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:06.180615 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:09.235162 IP6 2a05:f480:1c00:2c:8ef7::2.43131 >
2a03:f80:XXXX:552b::1.57042: UDP, length 74
20:11:09.235174 IP6 2a05:f480:1c00:2c:8ef7::2.63514 >
2a03:f80:XXXX:552b::1.59823: UDP, length 74
20:11:09.236840 IP6 2a05:f480:1c00:2c:8ef7::2.25972 >
2a03:f80:XXXX:552b::1.59274: UDP, length 74
20:11:09.236849 IP6 2a05:f480:1c00:2c:8ef7::2.12124 >
2a03:f80:XXXX:552b::1.58151: UDP, length 74
20:11:09.236990 IP6 2a05:f480:1c00:2c:8ef7::2.33932 >
2a03:f80:XXXX:552b::1.57280: UDP, length 74
20:11:09.256398 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32
20:11:10.276608 IP6 fe80::fc00:5ff:fe07:578d > ff02::1:ff00:2: ICMP6, neighbor
solicitation, who has 2a05:f480:1c00:2c:8ef7::2, length 32

-- 
You are receiving this mail because:
You are the assignee for the bug.