Tech <tech@xxxxxxxxxx> wrote: > > The dump was very boring, shows SYNs without any replies. redirect is > > the same as dnat, except that redirect just takes the first address that > > it finds on the given interface. So I'd guess that it picks an unusable > > one, e.g. link-local. Can you post 'ip -6 addr show dev $dev" ? > 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP > group default qlen 1000 > altname enp0s3 > altname ens3 > inet6 ::ffff:100.64.229.29/96 scope global > valid_lft forever preferred_lft forever > inet6 2a01:4f8:c0c:9e5b::1/64 scope global > valid_lft forever preferred_lft forever Thanks. Its probably pulling he mapped address from the list. I think we'll need to try harder. Can you test a patch?
