Super, i have closed myself out from my server with the firewall.

szilard: with your IPv6 woes, I'm wondering if there's something in your firewall config that's blocking part of the prefix advertisments meaning you then lose the SLAAC address, it's been a while since I last played with such things but possibly (at least temporarily) allowing ICMPv6 and/or IPv6 multicast and see if things start working better

possibly even trying to allow some of that with a log rule then you can at least see what's going through to see what's needed.

from my early memories of IPv6 it's supposed to be more reliant on multicast and ICMP to make things work properly.

m1ari: that easily can be. I'll review the whole setup, because it is a bit fragile right now. I have implemented too mayn things a dirty way, so i have to return to the roots and reconsider / document an test every step along the path.

mlari: correct. if you block icmpv6 you end up blocking ipv6's equivalent of ARP

rather than broadcast, you derive a multicast group address from the low bits of the address and send to that group. which means that nodes that aren't your target can ignore them more efficiently.

blocking icmpv6 and multicast v6 is indeed killing ipv6 as it relies on it.

multicast is used instead of arp. And icmpv6 is used for a lot of things by ipv6.