Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [RESOLVED] Problem with Cox cable-modem and pfSense with IPv6 routing on pfSense LAN side

    Scheduled Pinned Locked Moved IPv6
    28 Posts 6 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • obitoriO
      obitori
      last edited by obitori

      @Stan-qaz:  Thanks for this concise and easy to follow guide.  I used it to configure my pfsense box for IPv6.  I reset the box prior to following these instructions and did nothing else to my box.

      https://forum.pfsense.org/index.php?topic=102339.0

      I am having trouble configuring PfSense to pass IPv6 traffic through.  The IPv6 connection to Cox is working for pfSense and any other device I connect directly to the Cox firewall as shown below.  As I mentioned, I reset the pfsense box to factory defaults and then followed the above instructions (x2).  I cannot get the LAN IPv6 traffic to pass thru the PfSense fw.  I have a Cox-provided Arris Cable/Modem connected to the Cox cable connection and pfsense connected to the cable modem.

      Machines connecting directly to the Cox Cable Modem () work in IPv6 fine.  (This includes the pfSense box.)

      I think I might be experiencing this problem, but there is no setting that enables the fix described in the below series of posts:

      https://forum.pfsense.org/index.php?topic=143827.0

      Basically—assuming I am correct—the cable/modem is getting a /60 subnet but only using one /64.  That leaves nothing for pfSense to use on its LAN side, so the routing table is broken.  I need to either:

      1.  Replace the Cox router with one that will let me make the same changes that the above poster made and pass thru one /64 subnet to pfsense for exclusive use on the LAN side.

      2.  Alternatively, I need to configure DHCP6 or IPv6 network discovery to hand out an unrelated and exclusive subnet on the LAN side much like I do with IPv4.

      Admittedly, I might have this all wrong.  Any advice on how to solve this with my current setup and/or recommendations on cable modems to replace the ARRIS cable modem would be greatly appreciated!

      PFSENSE NICs

      *** Welcome to pfSense 2.4.3-RELEASE (amd64) on aquaduct ***
      
       WAN (wan)     ->   em0        -> v4/DHCP4: 192.168.88.104/24
                                      v6/DHCP6: 2600:8806:2300:6c30:f944:110a:7774:15a2/128
       LAN (lan)       ->    em1        -> v4: 10.20.30.40/24
                                       v6/t6: 2600:8806:2300:6c3e:2eb:caff:fee0:5f2/63
      
      

      PFSENSE PING RESULTS

      [2.4.3-RELEASE][root@pfsense/root: ping6 google.com
      PING6(56=40+8+8 bytes) 2600:8806:2300:6c30:f944:110a:7774:15a2 --> 2607:f8b0:4004:808::200e
      16 bytes from 2607:f8b0:4004:808::200e, icmp_seq=0 hlim=55 time=13.008 ms
      16 bytes from 2607:f8b0:4004:808::200e, icmp_seq=1 hlim=55 time=11.091 ms
      16 bytes from 2607:f8b0:4004:808::200e, icmp_seq=2 hlim=56 time=7.963 ms
      16 bytes from 2607:f8b0:4004:808::200e, icmp_seq=3 hlim=56 time=9.356 ms
      ^C
      --- google.com ping6 statistics ---
      4 packets transmitted, 4 packets received, 0.0% packet loss
      round-trip min/avg/max/std-dev = 7.963/10.354/13.008/1.891 ms
      [/code]
      
      IPv4 is working for machines behind pfSense (enabling DNS resolution), but any IPv6 traffic dies at the pfSense firewall.  (Traceroute6 confirmed this.)  
      
      [b]UBUNTU BOX BEHIND PFSENSE[/b]
      [code]$ ping6 yahoo.com
      PING yahoo.com(media-router-fp1.prod1.media.vip.bf1.yahoo.com (2001:4998:58:1836::10)) 56 data bytes
      ^C
      --- yahoo.com ping statistics ---
      5 packets transmitted, 0 received, 100% packet loss, time 4078ms[/code]
      
      Here is my routing table on pfSense
      [b]IPv6 ROUTES[/b]
      
      [code]Destination
      Gateway
      Flags
      Use
      Mtu
      Netif
      Expire
      default
      fe80::1256:11ff:fe72:bd3a%em0
      UGS
      5163
      1500
      em0
      
      ::1Rules (Drag to Change Order)
      		States 	Protocol 	Source 	Port 	Destination 	Port 	Gateway 	Queue 	Schedule 	Description 	Actions
      		0 /1 KiB
      	* 	Reserved
      Not assigned by IANA 	* 	* 	* 	4 /3.28 MiB
      link#5
      UH
      0
      16384
      lo0
      
      2600:8806:2300:6c30::/64
      link#1
      U
      0
      1500
      em0
      
      2600:8806:2300:6c30:f944:110a:7774:15a2
      link#1
      UHS
      0
      16384
      lo0
      
      2600:8806:2300:6c3e::/63
      link#2
      U
      2
      1500
      em1
      
      2600:8806:2300:6c3e:2eb:caff:fee0:5f2
      link#2
      UHS
      0
      16384
      lo0
      
      fe80::1256:11ff:fe72:bd3a
      fe80::1256:11ff:fe72:bd3a%em0
      UGHS
      0
      1500
      em0
      
      fe80::%em0/64
      link#1
      U
      1877
      1500
      em0
      
      fe80::2eb:caff:fee0:5f1%em0
      link#1
      UHS
      0
      16384
      lo0
      
      fe80::%em1/64
      link#2
      U
      13
      1500
      em1
      
      fe80::1:1%em1
      link#2
      UHS
      0
      16384
      lo0
      
      fe80::%lo0/64
      link#5
      U
      0
      16384
      lo0
      
      fe80::1%lo0
      link#5
      UHS
      0
      16384
      lo0[/code]
      
      [b]DHCPv6 LEASE FOR UBUNTU BOX[/b]
      
      [code]2600:8806:2300:6c3e::1137
      1253569233
      00:04:9a:06:a9:95:8f:38:00:01:e1:31:7e:34:40:2c:3e:8d
      38:2c:4a:b7:f2:d1
      
      2018/05/08 21:56:04
      2018/05/08 23:56:04[/code]
      
      [b]UBUNTU ROUTING TABLE FOR IPV6[/b]
      [code]$ route -6 -n
      Kernel IPv6 routing table
      Destination                    Next Hop                   Flag Met Ref Use If
      ::1/128                        ::                         U    256 1     0 lo
      2600:8806:2300:6c3e::1137/128  ::                         U    100 1     0 eno1
      2600:8806:2300:6c3e::/63       ::                         U    100 9   383 eno1
      fe80::/64                      ::                         U    100 1     0 eno1
      fe80::/64                      ::                         U    256 1     0 eno1
      ::/0                           fe80::1:1                  UG   100 3     2 eno1
      ::1/128                        ::                         Un   0   5     4 lo
      2600:8806:2300:6c3e::1137/128  ::                         Un   0   4     3 eno1
      fe80::6169:cbdd:9683:5c82/128  ::                         Un   0   3    54 eno1
      ff00::/8                       ::                         U    256 9   117 eno1
      ::/0                           ::                         !n   -1  1 
      [/code]
      
      [b]FIREWALL RULES (DEFAULT // UNTOUCHED)[/b]
      LAN
      
      [code]4 /3.28 MiB
      *
      *
      *
      LAN Address
      443
      80
      22
      *
      *
      
      Anti-Lockout Rule
      
      64 /29.41 MiB
      IPv4 * 
      LAN net 
      * 
      * 
      * 
      * 
      none 
      
      Default allow LAN to any rule 
      
      0 /0 B
      IPv6 * 
      LAN net 
      * 
      * 
      * 
      * 
      none 
      
      Default allow LAN IPv6 to any rule [/code]
      
      WAN
      [code]Rules (Drag to Change Order)
      		States 	Protocol 	Source 	Port 	Destination 	Port 	Gateway 	Queue 	Schedule 	Description 	Actions
      		0 /1 KiB
      	* 	Reserved
      Not assigned by IANA 	* 	* 	* 	4 /3.28 MiB[/code]
      
      
      1 Reply Last reply Reply Quote 0
      • M
        mrsunfire
        last edited by

        If I'm right, your LAN interface only gets a /63 prefix. This isn't routable. It has to be /64. Maybe you can request another prefix size with the option "DHCPv6 Prefix Delegation size" on WAN interface.

        Netgate 6100 MAX

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          My configuration for Cox Residential (Las Vegas)

          screenshot-2018-05-13-00-01-45.png_thumb
          screenshot-2018-05-13-00-01-45.png
          screenshot-2018-05-12-23-59-50.png_thumb
          screenshot-2018-05-12-23-59-50.png
          screenshot-2018-05-12-23-56-27.png_thumb
          screenshot-2018-05-12-23-56-27.png
          screenshot-2018-05-12-23-54-26.png_thumb
          screenshot-2018-05-12-23-54-26.png

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • M
            mrsunfire
            last edited by

            Why do you use a DHCPv6 server in your LAN? You don't need to. On WAN you can't block RFC1918 adresses for IPv6 it's necessary.

            Netgate 6100 MAX

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              RFC1918 has zero to do with IPv6. It is an IPv4-only RFC.

              I have my reasons for running both DHCPv6 and SLAAC on the inside.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                WAN:

                ifconfig igb0
                igb0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                options=6400bb <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,jumbo_mtu,vlan_hwcsum,vlan_hwtso,rxcsum_ipv6,txcsum_ipv6>ether 00:08:a2:0a:59:41
                hwaddr 00:08:a2:0a:59:41
                inet6 fe80::208:a2ff:fe0a:5941%igb0 prefixlen 64 scopeid 0x1
                inet6 2600🔡dcba:1c00:977:3f2a:d5a7:487c prefixlen 128
                inet 75.76.77.78 netmask 0xffffff00 broadcast 75.76.77.255
                nd6 options=23 <performnud,accept_rtadv,auto_linklocal>media: Ethernet autoselect (1000baseT <full-duplex>)
                status: active
                groups: WANS

                LAN:

                ifconfig igb1.223
                igb1.223: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                options=600003 <rxcsum,txcsum,rxcsum_ipv6,txcsum_ipv6>ether 00:08:a2:0a:59:42
                inet 192.168.223.1 netmask 0xffffff00 broadcast 192.168.223.255
                inet6 2600🔡ef:e101:208:a2ff:fe0a:5942 prefixlen 64
                inet6 fe80::1:1%igb1.223 prefixlen 64 scopeid 0xc
                nd6 options=21 <performnud,auto_linklocal>media: Ethernet autoselect (1000baseT <full-duplex>)
                status: active
                vlan: 223 vlanpcp: 0 parent interface: igb1
                groups: vlan

                IPv6 Default Gateway:

                netstat -rnfinet6
                Routing tables

                Internet6:
                Destination                      Gateway                      Flags    Netif Expire
                default                          fe80::2e86:d2ff:fe89:2019%igb0 UGS      igb0

                Host on LAN:

                ifconfig vlan0
                vlan0: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
                options=3 <rxcsum,txcsum>ether a8:60:b6:19:15:fe
                inet6 fe80::1c47:b241:7cc7:904c%vlan0 prefixlen 64 secured scopeid 0xf
                inet 192.168.223.6 netmask 0xffffff00 broadcast 192.168.223.255
                inet6 2600🔡ef:e101:69:9b8e:e35:23ed prefixlen 64 autoconf secured
                inet6 2600🔡ef:e101:a8ca:3526:bfc4:f4f4 prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101:fdb9:3136:35da:4ea3 prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101:ad74:ed05:6a25:ec83 prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101:d9df:2194:1555:69bd prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101:29a7:326e:cff6:4d26 prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101:ddc2:3e49:168d:93c6 prefixlen 64 deprecated autoconf temporary
                inet6 2600🔡ef:e101::145a prefixlen 64 dynamic
                inet6 2600🔡ef:e101:d4a1:321f:dd26:706b prefixlen 64 autoconf temporary
                nd6 options=201 <performnud,dad>vlan: 223 parent interface: en0
                media: autoselect (1000baseT <full-duplex>)
                status: active

                $ netstat -rnfinet6
                Routing tables

                Internet6:
                Destination                            Gateway                        Flags        Netif Expire
                default                                fe80::1:1%vlan0                UGc          vlan0</full-duplex></performnud,dad></rxcsum,txcsum></up,broadcast,running,simplex,multicast></full-duplex></performnud,auto_linklocal></rxcsum,txcsum,rxcsum_ipv6,txcsum_ipv6></up,broadcast,running,promisc,simplex,multicast></full-duplex></performnud,accept_rtadv,auto_linklocal></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,jumbo_mtu,vlan_hwcsum,vlan_hwtso,rxcsum_ipv6,txcsum_ipv6></up,broadcast,running,promisc,simplex,multicast>

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott
                  last edited by

                  @mrsunfire:

                  Why do you use a DHCPv6 server in your LAN? You don't need to. On WAN you can't block RFC1918 adresses for IPv6 it's necessary.

                  ????

                  RFC1918 is about private IPv4 addresses and has nothing to do with IPv6.  If you need something similar, hopefully without NAT, on IPv6, you'd use Unique Local Addresses (ULA) where you create your own /48 prefix that starts with fc.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • obitoriO
                    obitori
                    last edited by

                    So, I reset the pfsense and I reconfigured it per Derelict's post and screen shots for the WAN dhcp6 client to ask for a 56 DHCPv6 Prefix Delegation size of 56 and for the LAN to track the WAN and ask for a IPv6 Prefix ID of 1.  I also did the advanced–>networking-->DUID changes as suggested.  (I even took a DUID and edited it by hand and retried with that.)  When I rebooted the cable/modem and the pfsense, I got no IPv6 address for the LAN.

                    Here is what I see:

                    WAN

                    
                    [2.4.3-RELEASE][root@aquaduct.barcroft]/root: ifconfig em0
                    em0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
                    	options=4209b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,vlan_hwtso>ether 00:eb:ca:e0:05:f1
                    	hwaddr 00:eb:ca:e0:05:f1
                    	inet6 fe80::2eb:caff:fee0:5f1%em0 prefixlen 64 scopeid 0x1 
                    	inet6 2600:8806:2400:6d30:ada1:2a53:6ce6:b27 prefixlen 128 
                    	inet6 2600:8806:2400:6d30:fe90:4592:a9ab:aead prefixlen 128 
                    	inet 192.168.88.103 netmask 0xffffff00 broadcast 192.168.88.255 
                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>media: Ethernet autoselect (1000baseT <full-duplex>)
                    	status: active</full-duplex></performnud,accept_rtadv,auto_linklocal></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,vlan_hwtso></up,broadcast,running,simplex,multicast> 
                    

                    LAN

                    [2.4.3-RELEASE][root@pfsense]/root: ifconfig em1
                    em1: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
                    	options=4209b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,vlan_hwtso>ether 00:eb:ca:e0:05:f2
                    	hwaddr 00:eb:ca:e0:05:f2
                    	inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255 
                    	inet6 fe80::1:1%em1 prefixlen 64 scopeid 0x2 
                    	nd6 options=21 <performnud,auto_linklocal>media: Ethernet autoselect (1000baseT <full-duplex>)
                    	status: active</full-duplex></performnud,auto_linklocal></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,vlan_hwtso></up,broadcast,running,simplex,multicast> 
                    

                    IPv6 Default GW

                    2.4.3-RELEASE][root@pfsenset]/root: netstat -rnfinet6
                    Routing tables
                    
                    Internet6:
                    Destination                       Gateway                       Flags     Netif Expire
                    default                           fe80::1256:11ff:fe72:bd3a%em0 UGS         em0
                    ::1                               link#5                        UH          lo0
                    2600:8806:2400:6d30::/64          link#1                        U           em0
                    2600:8806:2400:6d30:ada1:2a53:6ce6:b27 link#1                   UHS         lo0
                    2600:8806:2400:6d30:fe90:4592:a9ab:aead link#1                  UHS         lo0
                    fe80::1256:11ff:fe72:bd3a         fe80::1256:11ff:fe72:bd3a%em0 UGHS        em0
                    fe80::%em0/64                     link#1                        U           em0
                    fe80::2eb:caff:fee0:5f1%em0       link#1                        UHS         lo0
                    fe80::%em1/64                     link#2                        U           em1
                    fe80::1:1%em1                     link#2                        UHS         lo0
                    fe80::%lo0/64                     link#5                        U           lo0
                    fe80::1%lo0                       link#5                        UHS         lo0
                    

                    Host on LAN ```
                    ~$ ifconfig enp5s0f2
                    enp5s0f2: flags=4163<up,broadcast,running,multicast>mtu 1500
                            inet 192.168.1.101  netmask 255.255.255.0  broadcast 192.168.1.255
                            inet6 2600:8806:2400:6d3e:4984:fc25:bc7c:294a  prefixlen 64  scopeid 0x0 <global>inet6 fe80::5f46:816a:a7f7:b377  prefixlen 64  scopeid 0x20
                            inet6 2600:8806:2400:6d3e:4423:f0f2:135f:bad  prefixlen 64  scopeid 0x0 <global>ether 80:fa:5b:0d:b1:f7  txqueuelen 1000  (Ethernet)
                            RX packets 22302  bytes 17487403 (17.4 MB)
                            RX errors 0  dropped 0  overruns 0  frame 0
                            TX packets 21097  bytes 3873976 (3.8 MB)
                            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0</global></global></up,broadcast,running,multicast>

                    
                    **Host on LAN route** ```
                    ~$ netstat -rnf6
                    Kernel IPv6 routing table
                    Destination                    Next Hop                   Flag Met Ref Use If
                    ::1/128                        ::                         U    256 1     0 lo
                    2600:8806:2400:6d3e::1622/128  ::                         U    100 1     0 enp5s0f2
                    2600:8806:2400:6d3e:a0be:2b09:ee0d:5622/128 ::                         U    100 1     0 enp5s0f2
                    2600:8806:2400:6d3e::/64       ::                         U    100 9   386 enp5s0f2
                    fe80::/64                      ::                         U    100 1     0 enp5s0f2
                    fe80::/64                      ::                         U    256 1     0 enp5s0f2
                    fe80::/64                      ::                         U    256 1     0 vmnet1
                    fe80::/64                      ::                         U    256 1     0 vmnet8
                    ::/0                           fe80::1:1                  UG   100 9   147 enp5s0f2
                    ::1/128                        ::                         Un   0   9    21 lo
                    2600:8806:2400:6d3e:4423:f0f2:135f:bad/128 ::                         Un   0   10   173 enp5s0f2
                    2600:8806:2400:6d3e:4984:fc25:bc7c:294a/128 ::                         Un   0   2     0 enp5s0f2
                    fe80::250:56ff:fec0:1/128      ::                         Un   0   2     0 vmnet1
                    fe80::250:56ff:fec0:8/128      ::                         Un   0   2     0 vmnet8
                    fe80::5f46:816a:a7f7:b377/128  ::                         Un   0   3    54 enp5s0f2
                    ff00::/8                       ::                         U    256 9   454 enp5s0f2
                    ff00::/8                       ::                         U    256 9    33 vmnet1
                    ff00::/8                       ::                         U    256 9    33 vmnet8
                    ::/0                           ::                         !n   -1  1     1 lo
                    
                    

                    DCHP System Log on PfSense ```

                    May 13 10:17:33 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:33 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:33 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:33 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:33 dhcp6c 88662 set status code
                    May 13 10:17:33 dhcp6c 88662 set IA_PD
                    May 13 10:17:33 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:33 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=904
                    May 13 10:17:33 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:33 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:33 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:33 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:33 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:33 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:33 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:33 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:33 dhcp6c 88662 preference: 0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:33 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:33 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:33 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:33 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:33 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:33 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:33 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=810
                    May 13 10:17:33 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:33 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:33 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:33 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:33 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:33 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:33 dhcp6c 88662 Sending Solicit
                    May 13 10:17:33 dhcp6c 88662 a new XID (5e71b2) is generated
                    May 13 10:17:33 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:33 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:33 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:33 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:33 dhcp6c 88662 set IA_PD
                    May 13 10:17:33 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:33 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1028
                    May 13 10:17:33 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:33 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:33 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:33 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:33 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:33 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:33 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:33 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:33 dhcp6c 88662 preference: 0
                    May 13 10:17:33 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:33 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:33 dhcp6c 88662 reset timer for em0 to 0.982453
                    May 13 10:17:34 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:34 dhcp6c 88662 Sending Request
                    May 13 10:17:34 dhcp6c 88662 a new XID (70a05c) is generated
                    May 13 10:17:34 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:34 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:34 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:34 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:34 dhcp6c 88662 set status code
                    May 13 10:17:34 dhcp6c 88662 set IA_PD
                    May 13 10:17:34 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:34 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=1084
                    May 13 10:17:34 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:34 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:34 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:34 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:34 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:34 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:34 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:34 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:34 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:34 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:34 dhcp6c 88662 preference: 0
                    May 13 10:17:34 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:34 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:34 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:34 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:34 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:34 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:34 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:34 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=712
                    May 13 10:17:34 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:37 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:37 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:37 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:37 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:37 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:37 dhcp6c 88662 Sending Solicit
                    May 13 10:17:37 dhcp6c 88662 a new XID (21b451) is generated
                    May 13 10:17:37 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:37 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:37 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:37 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:37 dhcp6c 88662 set IA_PD
                    May 13 10:17:37 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:37 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1024
                    May 13 10:17:37 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:37 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:37 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:37 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:37 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:37 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:37 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:37 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:37 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:37 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:37 dhcp6c 88662 preference: 0
                    May 13 10:17:37 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:37 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:37 dhcp6c 88662 reset timer for em0 to 0.979250
                    May 13 10:17:38 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:38 dhcp6c 88662 Sending Request
                    May 13 10:17:38 dhcp6c 88662 a new XID (1193f) is generated
                    May 13 10:17:38 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:38 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:38 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:38 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:38 dhcp6c 88662 set status code
                    May 13 10:17:38 dhcp6c 88662 set IA_PD
                    May 13 10:17:38 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:38 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=1075
                    May 13 10:17:38 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:38 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:38 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:38 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:38 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:38 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:38 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:38 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:38 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:38 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:38 dhcp6c 88662 preference: 0
                    May 13 10:17:38 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:38 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:38 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:38 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:38 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:38 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:38 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:38 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=456
                    May 13 10:17:38 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:42 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:42 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:42 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:42 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:42 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:42 dhcp6c 88662 Sending Solicit
                    May 13 10:17:42 dhcp6c 88662 a new XID (d14d0c) is generated
                    May 13 10:17:42 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:42 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:42 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:42 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:42 dhcp6c 88662 set IA_PD
                    May 13 10:17:42 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:42 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1037
                    May 13 10:17:42 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:42 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:42 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:42 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:42 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:42 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:42 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:42 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:42 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:42 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:42 dhcp6c 88662 preference: 0
                    May 13 10:17:42 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:42 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:42 dhcp6c 88662 reset timer for em0 to 0.982573
                    May 13 10:17:43 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:43 dhcp6c 88662 Sending Request
                    May 13 10:17:43 dhcp6c 88662 a new XID (e777ca) is generated
                    May 13 10:17:43 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:43 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:43 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:43 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:43 dhcp6c 88662 set status code
                    May 13 10:17:43 dhcp6c 88662 set IA_PD
                    May 13 10:17:43 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:43 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=912
                    May 13 10:17:43 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:43 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:43 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:43 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:43 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:43 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:43 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:43 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:43 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:43 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:43 dhcp6c 88662 preference: 0
                    May 13 10:17:43 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:43 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:43 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:43 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:43 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:43 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:43 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:43 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=977
                    May 13 10:17:43 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:46 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:46 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:46 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:46 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:46 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:46 dhcp6c 88662 Sending Solicit
                    May 13 10:17:46 dhcp6c 88662 a new XID (5c809a) is generated
                    May 13 10:17:46 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:46 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:46 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:46 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:46 dhcp6c 88662 set IA_PD
                    May 13 10:17:46 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:46 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1061
                    May 13 10:17:46 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:46 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:46 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:46 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:46 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:46 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:46 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:46 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:46 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:46 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:46 dhcp6c 88662 preference: 0
                    May 13 10:17:46 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:46 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:46 dhcp6c 88662 reset timer for em0 to 0.983726
                    May 13 10:17:47 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:47 dhcp6c 88662 Sending Request
                    May 13 10:17:47 dhcp6c 88662 a new XID (2a00d4) is generated
                    May 13 10:17:47 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:47 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:47 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:47 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:47 dhcp6c 88662 set status code
                    May 13 10:17:47 dhcp6c 88662 set IA_PD
                    May 13 10:17:47 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:47 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=1039
                    May 13 10:17:47 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:47 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:47 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:47 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:47 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:47 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:47 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:47 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:47 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:47 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:47 dhcp6c 88662 preference: 0
                    May 13 10:17:47 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:47 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:47 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:47 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:47 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:47 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:47 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:47 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=70
                    May 13 10:17:47 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:51 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:51 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:51 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:51 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:51 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:51 dhcp6c 88662 Sending Solicit
                    May 13 10:17:51 dhcp6c 88662 a new XID (e909ce) is generated
                    May 13 10:17:51 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:51 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:51 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:51 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:51 dhcp6c 88662 set IA_PD
                    May 13 10:17:51 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:51 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1073
                    May 13 10:17:51 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:51 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:51 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:51 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:51 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:51 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:51 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:51 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:51 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:51 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:51 dhcp6c 88662 preference: 0
                    May 13 10:17:51 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:51 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:51 dhcp6c 88662 reset timer for em0 to 0.959338
                    May 13 10:17:52 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:52 dhcp6c 88662 Sending Request
                    May 13 10:17:52 dhcp6c 88662 a new XID (b3e88a) is generated
                    May 13 10:17:52 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:52 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:52 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:52 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:52 dhcp6c 88662 set status code
                    May 13 10:17:52 dhcp6c 88662 set IA_PD
                    May 13 10:17:52 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:52 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=964
                    May 13 10:17:52 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:52 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:52 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:52 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:52 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:52 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:52 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:52 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:52 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:52 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:52 dhcp6c 88662 preference: 0
                    May 13 10:17:52 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:52 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:52 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:52 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:52 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:52 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:52 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:52 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=314
                    May 13 10:17:52 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:17:55 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:17:55 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:17:55 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:17:55 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:55 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:17:55 dhcp6c 88662 Sending Solicit
                    May 13 10:17:55 dhcp6c 88662 a new XID (cd9241) is generated
                    May 13 10:17:55 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:55 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:55 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:55 dhcp6c 88662 set IA_PD prefix
                    May 13 10:17:55 dhcp6c 88662 set IA_PD
                    May 13 10:17:55 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:17:55 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1064
                    May 13 10:17:55 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:55 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:55 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:55 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:55 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:55 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:55 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:55 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:55 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:55 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:55 dhcp6c 88662 preference: 0
                    May 13 10:17:55 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:55 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:17:55 dhcp6c 88662 reset timer for em0 to 0.983072
                    May 13 10:17:57 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:17:57 dhcp6c 88662 Sending Request
                    May 13 10:17:57 dhcp6c 88662 a new XID (6a3418) is generated
                    May 13 10:17:57 dhcp6c 88662 set client ID (len 14)
                    May 13 10:17:57 dhcp6c 88662 set server ID (len 14)
                    May 13 10:17:57 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:17:57 dhcp6c 88662 set option request (len 4)
                    May 13 10:17:57 dhcp6c 88662 set status code
                    May 13 10:17:57 dhcp6c 88662 set IA_PD
                    May 13 10:17:57 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:17:57 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=919
                    May 13 10:17:57 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:17:57 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:17:57 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:17:57 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:17:57 dhcp6c 88662 status code: no prefixes
                    May 13 10:17:57 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:17:57 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:17:57 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:17:57 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:17:57 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:17:57 dhcp6c 88662 preference: 0
                    May 13 10:17:57 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:17:57 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:17:57 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:17:57 dhcp6c 88662 make an IA: PD-0
                    May 13 10:17:57 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:17:57 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:17:57 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:17:57 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=580
                    May 13 10:17:57 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:18:00 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:18:00 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:18:00 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:18:00 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:18:00 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:18:00 dhcp6c 88662 Sending Solicit
                    May 13 10:18:00 dhcp6c 88662 a new XID (538115) is generated
                    May 13 10:18:00 dhcp6c 88662 set client ID (len 14)
                    May 13 10:18:00 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:18:00 dhcp6c 88662 set option request (len 4)
                    May 13 10:18:00 dhcp6c 88662 set IA_PD prefix
                    May 13 10:18:00 dhcp6c 88662 set IA_PD
                    May 13 10:18:00 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:18:00 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1003
                    May 13 10:18:00 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:18:00 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:18:00 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:18:00 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:18:00 dhcp6c 88662 status code: no prefixes
                    May 13 10:18:00 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:18:00 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:18:00 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:18:00 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:18:00 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:18:00 dhcp6c 88662 preference: 0
                    May 13 10:18:00 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:18:00 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:18:00 dhcp6c 88662 reset timer for em0 to 0.973202
                    May 13 10:18:01 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:18:01 dhcp6c 88662 Sending Request
                    May 13 10:18:01 dhcp6c 88662 a new XID (6aa1f5) is generated
                    May 13 10:18:01 dhcp6c 88662 set client ID (len 14)
                    May 13 10:18:01 dhcp6c 88662 set server ID (len 14)
                    May 13 10:18:01 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:18:01 dhcp6c 88662 set option request (len 4)
                    May 13 10:18:01 dhcp6c 88662 set status code
                    May 13 10:18:01 dhcp6c 88662 set IA_PD
                    May 13 10:18:01 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:18:01 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=1082
                    May 13 10:18:01 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:18:01 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:18:01 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:18:01 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:18:01 dhcp6c 88662 status code: no prefixes
                    May 13 10:18:01 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:18:01 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:18:01 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:18:01 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:18:01 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:18:01 dhcp6c 88662 preference: 0
                    May 13 10:18:01 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:18:01 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:18:01 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:18:01 dhcp6c 88662 make an IA: PD-0
                    May 13 10:18:01 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:18:01 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:18:01 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:18:01 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=830
                    May 13 10:18:01 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh
                    May 13 10:18:05 dhcp6c dhcp6c REQUEST on em0 - running rc.newwanipv6
                    May 13 10:18:05 dhcp6c 88662 script "/var/etc/dhcp6c_wan_script.sh" terminated
                    May 13 10:18:05 dhcp6c 88662 removing an event on em0, state=REQUEST
                    May 13 10:18:05 dhcp6c 88662 removing server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:18:05 dhcp6c 88662 got an expected reply, sleeping.
                    May 13 10:18:05 dhcp6c 88662 Sending Solicit
                    May 13 10:18:05 dhcp6c 88662 a new XID (67762e) is generated
                    May 13 10:18:05 dhcp6c 88662 set client ID (len 14)
                    May 13 10:18:05 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:18:05 dhcp6c 88662 set option request (len 4)
                    May 13 10:18:05 dhcp6c 88662 set IA_PD prefix
                    May 13 10:18:05 dhcp6c 88662 set IA_PD
                    May 13 10:18:05 dhcp6c 88662 send solicit to ff02::1:2%em0
                    May 13 10:18:05 dhcp6c 88662 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1009
                    May 13 10:18:05 dhcp6c 88662 receive advertise from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:18:05 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:18:05 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:18:05 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:18:05 dhcp6c 88662 status code: no prefixes
                    May 13 10:18:05 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:18:05 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:18:05 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:18:05 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:18:05 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:18:05 dhcp6c 88662 preference: 0
                    May 13 10:18:05 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:18:05 dhcp6c 88662 server ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a, pref=0
                    May 13 10:18:05 dhcp6c 88662 reset timer for em0 to 0.982925
                    May 13 10:18:06 dhcp6c 88662 picked a server (ID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a)
                    May 13 10:18:06 dhcp6c 88662 Sending Request
                    May 13 10:18:06 dhcp6c 88662 a new XID (18cbb1) is generated
                    May 13 10:18:06 dhcp6c 88662 set client ID (len 14)
                    May 13 10:18:06 dhcp6c 88662 set server ID (len 14)
                    May 13 10:18:06 dhcp6c 88662 set elapsed time (len 2)
                    May 13 10:18:06 dhcp6c 88662 set option request (len 4)
                    May 13 10:18:06 dhcp6c 88662 set status code
                    May 13 10:18:06 dhcp6c 88662 set IA_PD
                    May 13 10:18:06 dhcp6c 88662 send request to ff02::1:2%em0
                    May 13 10:18:06 dhcp6c 88662 reset a timer on em0, state=REQUEST, timeo=0, retrans=921
                    May 13 10:18:06 dhcp6c 88662 receive reply from fe80::1256:11ff:fe72:bd3a%em0 on em0
                    May 13 10:18:06 dhcp6c 88662 get DHCP option IA_PD, len 56
                    May 13 10:18:06 dhcp6c 88662 IA_PD: ID=0, T1=0, T2=0
                    May 13 10:18:06 dhcp6c 88662 get DHCP option status code, len 40
                    May 13 10:18:06 dhcp6c 88662 status code: no prefixes
                    May 13 10:18:06 dhcp6c 88662 get DHCP option server ID, len 14
                    May 13 10:18:06 dhcp6c 88662 DUID: 00:01:00:01:22:8a:fe:3f:10:56:11:72:bd:3a
                    May 13 10:18:06 dhcp6c 88662 get DHCP option client ID, len 14
                    May 13 10:18:06 dhcp6c 88662 DUID: 00:01:00:01:21:af:eb:79:11:11:ca:e0:05:f1
                    May 13 10:18:06 dhcp6c 88662 get DHCP option preference, len 1
                    May 13 10:18:06 dhcp6c 88662 preference: 0
                    May 13 10:18:06 dhcp6c 88662 get DHCP option DNS, len 16
                    May 13 10:18:06 dhcp6c 88662 dhcp6c Received REQUEST
                    May 13 10:18:06 dhcp6c 88662 nameserver[0] 2600:8806:2400:6d30:1256:11ff:fe72:bd3a
                    May 13 10:18:06 dhcp6c 88662 make an IA: PD-0
                    May 13 10:18:06 dhcp6c 88662 status code for PD-0: no prefixes
                    May 13 10:18:06 dhcp6c 88662 IA PD-0 is invalidated
                    May 13 10:18:06 dhcp6c 88662 remove an IA: PD-0
                    May 13 10:18:06 dhcp6c 88662 reset a timer on em0, state=INIT, timeo=0, retrans=428
                    May 13 10:18:06 dhcp6c 88662 executes /var/etc/dhcp6c_wan_script.sh

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      It does not look like they are giving you a prefix.  You should see something like this surrounding the IA-PD request:

                      dhcp6c[40011]: update a prefix 2600:dead:beef:a300::/56 pltime=140733193474432, vltime=34359824768
                      dhcp6c[40011]:  IA_PD prefix: 2600:dead:beef:a300::/56 pltime=86400 vltime=86400
                      dhcp6c[40011]:  IA_NA address: 2600:dead:beef:b00:c11a:aaeb:decd:ff37 pltime=86400 vltime=86400
                      dhcp6c[40011]: update an address 2600:dead:beef:b00:c11a:aaeb:decd:ff37 pltime=86400, vltime=140733193474432
                      dhcp6c[40011]: add an address 2600:dead:beef:b00:c11a:aaeb:decd:ff37/128 on igb1

                      You will have to call them and ask why not. Another option is seeking help from the Cox forum where you can specifically discuss what they have deployed there in your region. I would assume it to be similar to what I have here but it might not be. It is also possible your modem needs to be updated to enable IPv6/PD.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • stan-qazS
                        stan-qaz
                        last edited by

                        Which Cox cable modem do you have? The simple cable to Ethernet ones should be happy to give you a /56, if you have one of the fancy ones with internal router/firewall/WiFi they aren't so cooperative.

                        You'll need to check your modem's manual for how to switch from routed to bridged mode. You can likely find your manual by following links from the Cox Modem page if you don't have your manual handy.  https://www.cox.com/residential/support/cox-certified-cable-modems.html

                        You do need to make sure pfSense is not blocking Private Networks, RFC 1918 & 4193 (bottom of the Interfaces settings page) as Cox appears to use some of the private ranges (v4 and v6)  for their internal network.

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          Thanks for that info.

                          You do need to make sure pfSense is not blocking Private Networks, RFC 1918 & 4193 (bottom of the Interfaces settings page) as Cox appears to use some of the private ranges (v4 and v6)  for their internal network.

                          That would only matter if you are trying to accept inbound connections from those networks. Nobody should be doing that.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • stan-qazS
                            stan-qaz
                            last edited by

                            Cox doesn't seem to work right for me if I check the block 1918 box. This came up several years ago in this topic:

                            https://forum.pfsense.org/index.php?topic=66289.msg361564#msg361564

                            The Cox Cable tech support folks position is that they are within the RFC 1918 rules with these addresses as they stay on the private Cox Cable system and are not passed to the Internet.

                            and a quote from the link to DSL Reports Cox forum, the Cox Tech rep there:

                            CoxTech1

                            That' correct.  These IP's are being used within the Cox network and not being used for routing across the public Internet.

                            I can't break anything until late tonight but if you want me to try some testing tell me what you'd like to see and I'll try doing it then.

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              I am merely stating what rules that checkbox puts in place and their effect.

                              Unless you are receiving inbound connections into WAN from those addresses they have zero effect, regardless of what an ISP thinks. If they tell you you need to allow that, you should be asking many more questions.

                              block anything from private networks on interfaces with the option set

                              block in log quick on $WAN from 10.0.0.0/8 to any tracker 12000 label "Block private networks from WAN block 10/8"
                              block in log quick on $WAN from 127.0.0.0/8 to any tracker 12000 label "Block private networks from WAN block 127/8"
                              block in log quick on $WAN from 172.16.0.0/12 to any tracker 12000 label "Block private networks from WAN block 172.16/12"
                              block in log quick on $WAN from 192.168.0.0/16 to any tracker 12000 label "Block private networks from WAN block 192.168/16"
                              block in log quick on $WAN from fc00::/7 to any tracker 12000 label "Block ULA networks from WAN block fc00::/7"

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • stan-qazS
                                stan-qaz
                                last edited by

                                Edited to change Bogons to Private Networks which is what I meant to say.

                                Derelict, I just took my network down for a few minutes to play with this again.

                                If I have (not Bogons) private networks blocked I can't connect to the Cox DHCP server to get IP addresses for my WAN if I attempt to renew them.

                                If I allow (not Bogons) private networks I have no issues getting a response from the Cox DHCP server and both v4 and v6 IP addresses for my WAN.

                                Cox does things their way and there is nothing we customers can do to change that so we just have to puzzle out the problems they cause and hopefully solutions. They don't even warn us about the strange stuff, tripping over it is your first indication there is something wrong.

                                Other topics discussing this:

                                https://www.dslreports.com/forum/r30380140-RFC1918-DHCP-servers-on-COX-network

                                Had a fun one today. COX is using 10.0.0.0/8 addresses and 172.16.0.0/12 addresses on their WAN. This causes a headache for the end subscriber if one is blocking RFC1918 addresses on their WAN interface, as it may break DHCP.

                                http://www.techexams.net/forums/off-topic/114996-cox-using-rfc1918-addresses-their-wan.html

                                When setting up my router a few weeks ago I found I had to unblock 10.36.96.1 on my WAN interface for DHCP client and server.

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  I have Cox IPv4 and IPv6 and I have to do no such thing.

                                  I would be curious to see what was logged in the filter log when it failed.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  • stan-qazS
                                    stan-qaz
                                    last edited by

                                    With Private Networks blocked I'm seeing the Status_Interfaces browser activity spinner just continue to spin after I press the "Release" button until the page times out.

                                    No IPs are shown on the pfSense home/status page and both gateways, v4 and v6 offline.

                                    If I allow the private networks, save and apply, then I'm getting IPs and the gateways come up. See the second set of logs.

                                    System Log snips: (private networks blocked)

                                    May 16 20:36:21	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:21	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:20	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:19	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:19	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:18	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:36:17	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    
                                    May 16 20:36:02	kernel		cannot forward src fe80:2::de4a:3eff:fe4b:589, dst 2600:8800:2d81:5700:208:a2ff:fe0a:6b62, nxt 58, rcvif igb1, outif igb0
                                    
                                    May 16 20:35:43	kernel		cannot forward src fe80:2::1a66:daff:fe29:6fd0, dst 2600:8800:2d81:5700:208:a2ff:fe0a:6b62, nxt 58, rcvif igb1, outif igb0
                                    May 16 20:35:43	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:35:41	php-fpm	325	/rc.newipsecdns: IPsec ERROR: Could not find phase 1 source for connection . Omitting from configuration file.
                                    May 16 20:35:41	check_reload_status		Reloading filter
                                    May 16 20:35:41	php-fpm	325	/rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
                                    
                                    May 16 20:35:27	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:35:26	php-fpm	326	/rc.dyndns.update: Dynamic DNS (all.dnsomatic.com) There was an error trying to determine the public IP for interface - wan (igb0 ).
                                    May 16 20:35:26	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    May 16 20:35:25	check_reload_status		Reloading filter
                                    May 16 20:35:25	check_reload_status		Restarting OpenVPN tunnels/interfaces
                                    May 16 20:35:25	check_reload_status		Restarting ipsec tunnels
                                    May 16 20:35:25	check_reload_status		updating dyndns WAN_DHCP
                                    May 16 20:35:25	rc.gateway_alarm	94721	>>> Gateway alarm: WAN_DHCP (Addr:68.0.155.1 Alarm:1 RTT:7899ms RTTsd:2017ms Loss:21%)
                                    May 16 20:35:21	kernel		arpresolve: can't allocate llinfo for 68.0.155.1 on igb0
                                    

                                    Firewall log doesn't show any new entries.

                                    DHCP Log:

                                    May 16 20:35:10	dhcp6c	20230	exiting
                                    May 16 20:35:10	dhcp6c	20230	status code: success
                                    May 16 20:35:10	dhcp6c	20230	dhcp6c Received RELEASE
                                    May 16 20:35:10	dhcp6c	20230	status code: success
                                    May 16 20:35:10	dhcp6c	20230	dhcp6c Received RELEASE
                                    May 16 20:35:10	dhcp6c	20230	remove an address 2600:8800:2d81:5702:208:a2ff:fe0a:6b64/64 on igb3
                                    May 16 20:35:10	dhcp6c	20230	remove an address 2600:8800:2d81:5701:208:a2ff:fe0a:6b63/64 on igb2
                                    May 16 20:35:10	dhcp6c	20230	remove an address 2600:8800:2d81:5700:208:a2ff:fe0a:6b62/64 on igb1
                                    May 16 20:35:10	dhcp6c	20230	Sending Release
                                    May 16 20:35:10	dhcp6c	20230	Start address release
                                    May 16 20:35:10	dhcp6c	20230	remove an address 2600:8800:ff06:1b00:509d:6ce5:a640:8277/128 on igb0
                                    May 16 20:35:10	dhcp6c	20230	Sending Release
                                    May 16 20:35:10	dhcp6c	20230	Start address release
                                    May 16 20:35:10	dhclient	10757	exiting.
                                    May 16 20:35:10	dhclient	10757	connection closed
                                    May 16 20:35:10	dhclient		FAIL
                                    May 16 20:35:10	dhclient		Deleting old routes
                                    May 16 20:35:10	dhclient		RELEASE
                                    May 16 20:35:10	dhclient		DHCPRELEASE on igb0 to 172.19.73.165 port 67
                                    May 16 20:35:10	dhclient		Sending on Socket/fallback
                                    May 16 20:35:10	dhclient		Sending on BPF/igb0/00:08:a2:0a:6b:61
                                    May 16 20:35:10	dhclient		Listening on BPF/igb0/00:08:a2:0a:6b:61
                                    May 16 20:35:10	dhclient		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:35:10	dhclient		All rights reserved.
                                    May 16 20:35:10	dhclient		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:35:10	dhclient		Internet Systems Consortium DHCP Client 4.3.6-P1
                                    

                                    =================

                                    System Log: (private networks allowed)

                                    May 16 20:46:39	php-fpm	3193	/rc.start_packages: Restarting/Starting all packages.
                                    May 16 20:46:38	check_reload_status		Starting packages
                                    May 16 20:46:38	php-fpm	6468	/rc.newwanipv6: pfSense package system has detected an IP change or dynamic WAN reconnection - 2600:8800:ff06:1b00:7526:f882:524d:f48b -> 2600:8800:ff06:1b00:545c:6314:4295:8fbf - Restarting packages.
                                    May 16 20:46:38	php-fpm	6468	/rc.newwanipv6: Creating rrd update script
                                    May 16 20:46:38	php-fpm	6468	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                                    May 16 20:46:38	php-fpm	6468	/rc.newwanipv6: Ignoring IPsec reload since there are no tunnels on interface wan
                                    May 16 20:46:37	php-fpm	6468	/rc.newwanipv6: phpDynDNS (all.dnsomatic.com): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry.
                                    May 16 20:46:36	php-cgi		notify_monitor.php: Message sent to pfsense@stanmiller.info OK
                                    May 16 20:46:35	dhcpleases		kqueue error: unkown
                                    May 16 20:46:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:34	php-fpm	325	/rc.start_packages: Restarting/Starting all packages.
                                    May 16 20:46:34	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:34	php-fpm	325	/rc.newipsecdns: IPsec ERROR: Could not find phase 1 source for connection . Omitting from configuration file.
                                    May 16 20:46:34	check_reload_status		Reloading filter
                                    May 16 20:46:34	php-fpm	325	/rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
                                    May 16 20:46:33	check_reload_status		Starting packages
                                    May 16 20:46:33	php-fpm	326	/rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 68.0.155.238 -> 68.0.159.52 - Restarting packages.
                                    May 16 20:46:32	php-fpm	6468	/rc.newwanipv6: The command '/sbin/ifconfig igb0 inet6 2600:8800:ff06:1b00:7526:f882:524d:f48b delete' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
                                    May 16 20:46:32	check_reload_status		Reloading filter
                                    May 16 20:46:32	php-fpm	6468	/rc.newwanipv6: Removing static route for monitor fe80::242:5aff:fe9e:ac19 and adding a new route through fe80::242:5aff:fe9e:ac19%igb0
                                    May 16 20:46:32	php-fpm	6468	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::242:5aff:fe9e:ac19%igb0
                                    May 16 20:46:32	php-fpm	6468	/rc.newwanipv6: ROUTING: setting default route to 68.0.159.1
                                    May 16 20:46:31	php-fpm	326	/rc.newwanip: Creating rrd update script
                                    May 16 20:46:31	php-fpm	326	/rc.newwanip: Resyncing OpenVPN instances for interface WAN.
                                    May 16 20:46:31	php-fpm	326	/rc.newwanip: Ignoring IPsec reload since there are no tunnels on interface wan
                                    May 16 20:46:31	dhcpleases		kqueue error: unkown
                                    May 16 20:46:30	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:30	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:30	php-fpm	326	/rc.newwanip: phpDynDNS (all.dnsomatic.com): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry.
                                    May 16 20:46:30	php-fpm	30881	/rc.dyndns.update: DNS-O-Matic (all.dnsomatic.com): (Success) IP Address Changed Successfully! (68.0.159.52)
                                    May 16 20:46:30	php-fpm	30881	/rc.dyndns.update: phpDynDNS: updating cache file /conf/dyndns_wandnsomatic'all.dnsomatic.com'0.cache: 68.0.159.52
                                    May 16 20:46:28	dhcpleases		kqueue error: unkown
                                    May 16 20:46:28	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:28	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:25	dhcpleases		kqueue error: unkown
                                    May 16 20:46:25	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:25	php-fpm	3193	/interfaces.php: Creating rrd update script
                                    May 16 20:46:25	check_reload_status		Reloading filter
                                    May 16 20:46:24	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:24	php-fpm	3193	/interfaces.php: Removing static route for monitor fe80::242:5aff:fe9e:ac19 and adding a new route through fe80::242:5aff:fe9e:ac19%igb0
                                    May 16 20:46:24	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:24	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:22	check_reload_status		updating dyndns wan
                                    May 16 20:46:22	php-fpm	6468	/rc.newwanipv6: rc.newwanipv6: on (IP address: 2600:8800:ff06:1b00:545c:6314:4295:8fbf) (interface: wan) (real interface: igb0).
                                    May 16 20:46:22	php-fpm	6468	/rc.newwanipv6: rc.newwanipv6: Info: starting on igb0.
                                    May 16 20:46:21	dhcpleases		kqueue error: unkown
                                    May 16 20:46:21	php-fpm	326	/rc.newwanip: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1526528781] unbound[19892:0] error: bind: address already in use [1526528781] unbound[19892:0] fatal error: could not open ports'
                                    May 16 20:46:20	dhcpleases		kqueue error: unkown
                                    May 16 20:46:20	rtsold		Starting dhcp6 client for interface wan(igb0)
                                    May 16 20:46:20	rtsold		Received RA specifying route fe80::242:5aff:fe9e:ac19 for interface wan(igb0)
                                    May 16 20:46:19	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:19	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:19	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:19	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:18	check_reload_status		Restarting ipsec tunnels
                                    May 16 20:46:18	php-fpm	3193	/interfaces.php: ROUTING: setting default route to 68.0.159.1
                                    May 16 20:46:17	php-fpm	326	/rc.newwanip: ROUTING: setting default route to 68.0.159.1
                                    May 16 20:46:17	php-fpm	326	/rc.newwanip: IP Address has changed, killing states on former IP Address 68.0.155.238.
                                    May 16 20:46:17	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:17	php-fpm	326	/rc.newwanip: rc.newwanip: on (IP address: 68.0.159.52) (interface: WAN[wan]) (real interface: igb0).
                                    May 16 20:46:17	php-fpm	326	/rc.newwanip: rc.newwanip: Info: starting on igb0.
                                    May 16 20:46:16	php-fpm	3193	/interfaces.php: Starting rtsold process
                                    May 16 20:46:16	php-fpm	3193	/interfaces.php: Accept router advertisements on interface igb0
                                    May 16 20:46:16	php-fpm	3193	/interfaces.php: calling interface_dhcpv6_configure.
                                    May 16 20:46:16	check_reload_status		rc.newwanip starting igb0
                                    May 16 20:46:10	check_reload_status		Syncing firewall
                                    

                                    Firewall log is still empty.

                                    DHCP Log:

                                    May 16 20:46:37	dhcpd		Server starting service.
                                    May 16 20:46:37	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:37	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:37	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:37	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:37	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:37	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:37	dhcpd		Bound to *:547
                                    May 16 20:46:37	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:37	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:37	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:37	dhcpd		All rights reserved.
                                    May 16 20:46:37	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:37	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:37	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:37	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:37	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:37	dhcpd		All rights reserved.
                                    May 16 20:46:37	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:37	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:36	dhcpleases		Sending HUP signal to dns daemon(83690)
                                    May 16 20:46:36	dhcpd		Server starting service.
                                    May 16 20:46:36	dhcpleases		Sending HUP signal to dns daemon(83690)
                                    May 16 20:46:36	dhcpd		Sending on Socket/fallback/fallback-net
                                    May 16 20:46:36	dhcpd		Sending on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:36	dhcpd		Listening on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:36	dhcpd		Sending on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:36	dhcpd		Listening on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:36	dhcpd		Sending on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:36	dhcpd		Listening on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:36	dhcpd		Wrote 1 leases to leases file.
                                    May 16 20:46:36	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:36	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:36	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:36	dhcpd		All rights reserved.
                                    May 16 20:46:36	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:36	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:36	dhcpd		PID file: /var/run/dhcpd.pid
                                    May 16 20:46:36	dhcpd		Database file: /var/db/dhcpd.leases
                                    May 16 20:46:36	dhcpd		Config file: /etc/dhcpd.conf
                                    May 16 20:46:36	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:36	dhcpd		All rights reserved.
                                    May 16 20:46:36	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:36	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:35	dhcpleases		Sending HUP signal to dns daemon(83690)
                                    May 16 20:46:35	dhcpleases		kqueue error: unkown
                                    May 16 20:46:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:34	dhcpleases		Sending HUP signal to dns daemon(27486)
                                    May 16 20:46:34	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:32	dhcpd		Server starting service.
                                    May 16 20:46:32	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:32	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:32	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:32	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:32	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:32	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:32	dhcpd		Bound to *:547
                                    May 16 20:46:32	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:32	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:32	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:32	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:32	dhcpd		All rights reserved.
                                    May 16 20:46:32	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:32	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:32	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:32	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:32	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:32	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:32	dhcpd		All rights reserved.
                                    May 16 20:46:32	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:32	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:31	dhcpleases		Sending HUP signal to dns daemon(27486)
                                    May 16 20:46:31	dhcpleases		kqueue error: unkown
                                    May 16 20:46:30	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:30	dhcpleases		Sending HUP signal to dns daemon(4931)
                                    May 16 20:46:30	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:29	dhcpd		Server starting service.
                                    May 16 20:46:29	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:29	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:29	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:29	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:29	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:29	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:29	dhcpd		Bound to *:547
                                    May 16 20:46:29	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:29	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:29	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:29	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:29	dhcpd		All rights reserved.
                                    May 16 20:46:29	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:29	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:29	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:29	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:29	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:29	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:29	dhcpd		All rights reserved.
                                    May 16 20:46:29	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:29	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:28	dhcpleases		Sending HUP signal to dns daemon(4931)
                                    May 16 20:46:28	dhcpleases		kqueue error: unkown
                                    May 16 20:46:28	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:28	dhcpleases		Sending HUP signal to dns daemon(68537)
                                    May 16 20:46:28	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:26	dhcpd		Server starting service.
                                    May 16 20:46:26	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:26	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:26	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:26	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:26	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:26	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:26	dhcpd		Bound to *:547
                                    May 16 20:46:26	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:26	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:26	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:26	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:26	dhcpd		All rights reserved.
                                    May 16 20:46:26	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:26	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:26	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:26	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:26	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:26	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:26	dhcpd		All rights reserved.
                                    May 16 20:46:26	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:26	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:25	dhcpleases		Sending HUP signal to dns daemon(68537)
                                    May 16 20:46:25	dhcpleases		kqueue error: unkown
                                    May 16 20:46:25	dhcpd		Server starting service.
                                    May 16 20:46:25	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:25	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:25	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:25	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:25	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:25	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:25	dhcpd		Bound to *:547
                                    May 16 20:46:25	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:25	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:25	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:25	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:25	dhcpd		All rights reserved.
                                    May 16 20:46:25	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:25	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:25	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:25	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:25	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:25	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:25	dhcpd		All rights reserved.
                                    May 16 20:46:25	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:25	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:25	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:25	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:24	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:24	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:24	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:24	dhcpd		Server starting service.
                                    May 16 20:46:24	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:24	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:24	dhcpd		Sending on Socket/fallback/fallback-net
                                    May 16 20:46:24	dhcpd		Sending on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:24	dhcpd		Listening on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:24	dhcpd		Sending on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:24	dhcpd		Listening on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:24	dhcpd		Sending on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:24	dhcpd		Listening on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:24	dhcpd		Wrote 1 leases to leases file.
                                    May 16 20:46:24	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:24	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:24	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:24	dhcpd		All rights reserved.
                                    May 16 20:46:24	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:24	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:24	dhcpd		PID file: /var/run/dhcpd.pid
                                    May 16 20:46:24	dhcpd		Database file: /var/db/dhcpd.leases
                                    May 16 20:46:24	dhcpd		Config file: /etc/dhcpd.conf
                                    May 16 20:46:24	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:24	dhcpd		All rights reserved.
                                    May 16 20:46:24	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:24	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:22	dhcpd		Server starting service.
                                    May 16 20:46:22	dhcpd		Sending on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:22	dhcpd		Listening on Socket/5/igb1/2600:8800:2d81:5700::/64
                                    May 16 20:46:22	dhcpd		Sending on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:22	dhcpd		Listening on Socket/5/igb2/2600:8800:2d81:5701::/64
                                    May 16 20:46:22	dhcpd		Sending on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:22	dhcpd		Listening on Socket/5/igb3/2600:8800:2d81:5702::/64
                                    May 16 20:46:22	dhcpd		Bound to *:547
                                    May 16 20:46:22	dhcpd		Wrote 0 NA, 0 TA, 0 PD leases to lease file.
                                    May 16 20:46:22	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:22	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:22	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:22	dhcpd		All rights reserved.
                                    May 16 20:46:22	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:22	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:22	dhcpd		PID file: /var/run/dhcpdv6.pid
                                    May 16 20:46:22	dhcpd		Database file: /var/db/dhcpd6.leases
                                    May 16 20:46:22	dhcpd		Config file: /etc/dhcpdv6.conf
                                    May 16 20:46:22	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:22	dhcpd		All rights reserved.
                                    May 16 20:46:22	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:22	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:22	dhcp6c	11182	add an address 2600:8800:ff06:1b00:545c:6314:4295:8fbf/128 on igb0
                                    May 16 20:46:22	dhcp6c	11182	status code for NA-0: success
                                    May 16 20:46:22	dhcp6c	11182	add an address 2600:8800:2d81:5702:208:a2ff:fe0a:6b64/64 on igb3
                                    May 16 20:46:22	dhcp6c	11182	add an address 2600:8800:2d81:5701:208:a2ff:fe0a:6b63/64 on igb2
                                    May 16 20:46:22	dhcp6c	11182	add an address 2600:8800:2d81:5700:208:a2ff:fe0a:6b62/64 on igb1
                                    May 16 20:46:22	dhcp6c	11182	status code for PD-0: success
                                    May 16 20:46:22	dhcp6c	11182	dhcp6c Received REQUEST
                                    May 16 20:46:22	dhcp6c	11182	duplicated DNS address (2001:578:3f:1::30)
                                    May 16 20:46:22	dhcp6c	11182	duplicated DNS address (2001:578:3f::30)
                                    May 16 20:46:22	dhcp6c	11182	Sending Request
                                    May 16 20:46:21	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:21	dhcpd		Server starting service.
                                    May 16 20:46:21	dhcpd		Sending on Socket/fallback/fallback-net
                                    May 16 20:46:21	dhcpd		Sending on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:21	dhcpd		Listening on BPF/igb1/00:08:a2:0a:6b:62/172.16.0.0/24
                                    May 16 20:46:21	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:21	dhcpd		Sending on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:21	dhcpd		Listening on BPF/igb2/00:08:a2:0a:6b:63/172.16.1.0/24
                                    May 16 20:46:21	dhcpd		Sending on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:21	dhcpd		Listening on BPF/igb3/00:08:a2:0a:6b:64/172.16.2.0/24
                                    May 16 20:46:21	dhcpd		Wrote 1 leases to leases file.
                                    May 16 20:46:21	dhcpd		Wrote 0 new dynamic host decls to leases file.
                                    May 16 20:46:21	dhcpd		Wrote 0 deleted host decls to leases file.
                                    May 16 20:46:21	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:21	dhcpd		All rights reserved.
                                    May 16 20:46:21	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:21	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:21	dhcpd		PID file: /var/run/dhcpd.pid
                                    May 16 20:46:21	dhcpd		Database file: /var/db/dhcpd.leases
                                    May 16 20:46:21	dhcpd		Config file: /etc/dhcpd.conf
                                    May 16 20:46:21	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
                                    May 16 20:46:21	dhcpd		All rights reserved.
                                    May 16 20:46:21	dhcpd		Copyright 2004-2018 Internet Systems Consortium.
                                    May 16 20:46:21	dhcpd		Internet Systems Consortium DHCP Server 4.3.6-P1
                                    May 16 20:46:21	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:21	dhcpleases		kqueue error: unkown
                                    May 16 20:46:21	dhcp6c	11182	duplicated DNS address (2001:578:3f:1::30)
                                    May 16 20:46:21	dhcp6c	11182	duplicated DNS address (2001:578:3f::30)
                                    May 16 20:46:21	dhcp6c	11182	Sending Solicit
                                    May 16 20:46:20	dhcpleases		Sending HUP signal to dns daemon(11710)
                                    May 16 20:46:20	dhcpleases		kqueue error: unkown
                                    May 16 20:46:20	dhcp6c	11116	skip opening control port
                                    May 16 20:46:20	dhcp6c	11116	failed initialize control message authentication
                                    May 16 20:46:20	dhcp6c	11116	failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    May 16 20:46:19	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:19	dhcpleases		Sending HUP signal to dns daemon(51712)
                                    May 16 20:46:19	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:19	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
                                    May 16 20:46:19	dhcpleases		Sending HUP signal to dns daemon(51712)
                                    May 16 20:46:19	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:17	dhcpleases		Sending HUP signal to dns daemon(51712)
                                    May 16 20:46:17	dhcpleases		/etc/hosts changed size from original!
                                    May 16 20:46:16	dhclient	66389	bound to 68.0.159.52 -- renewal in 43200 seconds.
                                    May 16 20:46:16	dhclient		Creating resolv.conf
                                    May 16 20:46:16	dhclient		/sbin/route add default 68.0.159.1
                                    May 16 20:46:16	dhclient		Adding new routes to interface: igb0
                                    May 16 20:46:16	dhclient		New Routers (igb0): 68.0.159.1
                                    May 16 20:46:16	dhclient		New Broadcast Address (igb0): 68.0.159.255
                                    May 16 20:46:16	dhclient		New Subnet Mask (igb0): 255.255.255.0
                                    May 16 20:46:16	dhclient		New IP Address (igb0): 68.0.159.52
                                    May 16 20:46:16	dhclient		ifconfig igb0 inet 68.0.159.52 netmask 255.255.255.0 broadcast 68.0.159.255
                                    May 16 20:46:16	dhclient		Starting add_new_address()
                                    May 16 20:46:16	dhclient		Deleting old routes
                                    May 16 20:46:16	dhclient		BOUND
                                    May 16 20:46:16	dhclient	66389	DHCPACK from 10.48.32.1
                                    May 16 20:46:16	dhclient	66389	DHCPREQUEST on igb0 to 255.255.255.255 port 67
                                    May 16 20:46:16	dhclient		ARPCHECK
                                    May 16 20:46:14	dhclient		ARPSEND
                                    May 16 20:46:14	dhclient	66389	DHCPOFFER from 10.48.32.1
                                    May 16 20:46:14	dhclient	66389	DHCPDISCOVER on igb0 to 255.255.255.255 port 67 interval 2
                                    May 16 20:46:14	dhclient		PREINIT
                                    May 16 20:46:14	dhclient		Deleting old routes
                                    May 16 20:46:14	dhclient		EXPIRE
                                    May 16 20:46:14	dhclient		PREINIT
                                    

                                    I'm far from an expert at this so I don't have any real idea what is going wrong other than what I found on other topics about it being a DCHP server access issue.

                                    If I can provide you any information that might help I'll be glad to try, just tell me what you need.

                                    1 Reply Last reply Reply Quote 0
                                    • DerelictD
                                      Derelict LAYER 8 Netgate
                                      last edited by

                                      Interesting. Public address from a private-addressed server on WAN.

                                      You wouldn't happen to have the firewall filter logs from when you have the RFC1918 block enabled would you?

                                      Chattanooga, Tennessee, USA
                                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                      1 Reply Last reply Reply Quote 0
                                      • DerelictD
                                        Derelict LAYER 8 Netgate
                                        last edited by

                                        In that unique case you can make an RFC1918 alias and:

                                        Pass the DHCP traffic in on WAN
                                        Block the RFC1918 in on WAN
                                        Rest of your WAN rules

                                        Disable the checkbox for RFC1918 on WAN.

                                        The ISP should not be expecting you to accept that traffic into WAN. I would open a ticket with them.

                                        Chattanooga, Tennessee, USA
                                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                        1 Reply Last reply Reply Quote 0
                                        • stan-qazS
                                          stan-qaz
                                          last edited by

                                          The firewall logs always show as empty with the private block enabled or disabled.

                                          I've talked to Cox tech support by phone and via their DSL Reports rep and no information is public about their use of the private network space within the Cox system. Not even a simple list of "we use these ranges, pick something else for your use" which has bitten folks for some time now when they have duplicates.

                                          I'll skip trying to create firewall rules, want to keep the pfSense setup as basic as possible.

                                          obitoriO 1 Reply Last reply Reply Quote 0
                                          • obitoriO
                                            obitori @stan-qaz
                                            last edited by

                                            @stan-qaz @Derelict

                                            I believe the problem was my rental ASSUS cable-modem/router-wifi. It was not passing the prefix subnet information, only individual ipv6 ip addresses for the one /64 subnet that it was using for direct connections to its LAN side. It was not sharing the rest of the /60 block that was showing up on the WAN side.

                                            When I swapped it out for a NETGEAR CM700 and plugged the pfsense firewall into the NETGEAR CM700 ethernet out, the pfsense fw picked up the proper IPv6 information to distribute IPv6 addresses on the LAN side. That's what I wanted. I am going to mark this as resolved.

                                            martywiseM 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.