I run 15.1-RELEASE-p2 on an old laptop with pf configured as follows:
Basically, I want the outbound traffic unlimited and the inbound traffic limited to a few ports plus replies to outbound queries.
This works fine as long as my Wi-Fi interface uses only IPv4, but if I enable IPv6, I encounter time outs making the system unusable.
For instance, when I run pkg update, pkg contacts pkg.freebsd.org using IPv6 but times out waiting for a reply.
If I disable PF, pkg update works like a charm.
There must be some obvious error in my configuration, but as a beginner, I can't see it and could use some help.
Code:
set block-policy drop
set skip on lo0
scrub in all fragment reassemble
block in all
pass out quick all keep state
antispoof for wlan0
pass in proto tcp to any port ssh keep state
pass in proto tcp to any port http keep state
pass in proto udp to any port mdnsBasically, I want the outbound traffic unlimited and the inbound traffic limited to a few ports plus replies to outbound queries.
This works fine as long as my Wi-Fi interface uses only IPv4, but if I enable IPv6, I encounter time outs making the system unusable.
For instance, when I run pkg update, pkg contacts pkg.freebsd.org using IPv6 but times out waiting for a reply.
If I disable PF, pkg update works like a charm.
There must be some obvious error in my configuration, but as a beginner, I can't see it and could use some help.