Why "Blocking Bogons" breaks DHCPv6 on WAN

stephenw10

You can see the rules in the rules.debug file, for example:

# allow our DHCPv6 client out to the BT
pass in  quick on $BT proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 ridentifier 1000005711 label "allow dhcpv6 client in BT"
pass in  quick on $BT proto udp from any port = 547 to any port = 546 ridentifier 1000005712 label "allow dhcpv6 client in BT"
# Add Priority to dhcp6c packets if enabled
pass out  quick on $BT proto udp from any port = 546 to any port = 547 ridentifier 1000005713 label "allow dhcpv6 client out BT"

That is above the block bogons rule:

# block bogon networks (IPv6)
# https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt
block in log quick on $BT from <bogonsv6> to any ridentifier 11004 label "block bogon IPv6 networks from BT"

Steve