Re: iptables MARK breaks radvd

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Hello,

green a écrit :
> Debian Squeeze is running on a Soekris net5501 as an internet gateway.
> 
> For use with shaping, there is an ip6tables rule like this:
>  ip6tables -t mangle -A OUTPUT -j MARK --set-mark 0x4/0xf
> And the same with iptables (ipv4).
> 
> radvd is set up to provide ipv6 addresses to LAN clients.
> 
> Unfortunately the above ip6tables rule breaks radvd.  Nothing different happens 
> except clients do not seem to see the advertisements and so get no ipv6 
> address.

Can you do packet captures on all relevant interfaces/ports and check
whether the router advertisements are actually sent and received ?

(Regardless of this issue, I would exclude neighbour discovery packets
from any shaping.)