zirias@
Developer
Not sure whether pf would already allow enough of it as part of the "connection state" implementation, but you normally want to also allow the ICMP type
If you use IPv6, you'd need theses additional icmpv6 types to make SLAAC work correctly:
unreach
. It's needed for reliable networking, e.g. to signal an unreachable UDP port, or to detect when path MTU is too small…If you use IPv6, you'd need theses additional icmpv6 types to make SLAAC work correctly:
neighbradv, neighbrsol, routeradv, routersol
.