From owner-freebsd-questions@FreeBSD.ORG  Thu Aug  7 12:53:52 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id EA23F150
 for <freebsd-questions@freebsd.org>; Thu,  7 Aug 2014 12:53:52 +0000 (UTC)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net
 [IPv6:2001:470:1f06:1126::2])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "miucha.iecc.com",
 Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 868CC24E2
 for <freebsd-questions@freebsd.org>; Thu,  7 Aug 2014 12:53:52 +0000 (UTC)
Received: (qmail 23017 invoked from network); 7 Aug 2014 12:53:51 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com;
 h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent;
 s=59e8.53e376df.k1408; bh=yRnp80/t+ui6R1O5IXL0gQ4YuMU3XkGtaDZdF2IhrV8=;
 b=HjXVrSvq4XbIJSXRsNM8ZWcLLdEHnxvaWDj6QuP5rv1LAxJ4bZPz4IvDXuMzIvtahVhO4Mq7fGAhTLXRZ6vjeslUJvbuYtiYz+ihn+HfRJwuguQUOdt/Pys8/XWO3jPKGxSmqX98XV/UthyZQKJUdyHPOx4XzLCnZwGWeXMnHGtG8oQDYuJqesAd5LUMuIChOyJGCp2zme3+Bzx0JMmnL4Hu/invO1FKs++A8r9yFrEi24yaxFXNy6FSgldv6XQS
Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170])
 by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170])
 with ESMTPS (TLS1.0/X.509/SHA1) via TCP6; 07 Aug 2014 12:53:50 -0000
Date: 7 Aug 2014 08:53:45 -0400
Message-ID: <alpine.BSF.2.11.1408070849320.22078@joyce.lan>
From: "John R. Levine" <johnl@iecc.com>
To: "David Benfell" <benfell@parts-unknown.org>
Subject: Re: he.net IPv6 tunnel
In-Reply-To: <20140807052054.GA1791@home.parts-unknown.org>
References: <20140804105020.GD94656@home.parts-unknown.org>
 <20140806231738.13354.qmail@joyce.lan>
 <20140807041023.GA1656@home.parts-unknown.org>
 <alpine.BSF.2.11.1408070032050.14519@joyce.lan>
 <20140807052054.GA1791@home.parts-unknown.org>
User-Agent: Alpine 2.11 (BSF 23 2013-08-11)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-questions@freebsd.org
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Aug 2014 12:53:53 -0000

>> If you don't want to route the v6 addresses on your LAN, put them on the
>> loopback lo0 rather than a real interface.
>
> I think I do want them on a real interface. They need to be
> addressable from the outside world. Am I misunderstanding aliasing?

The traffic comes in via the tunnel, not via your LAN, so there's no point 
in putting them on a LAN interface.

> Can I use the configuration bits you had for bce0 on my em0? And if I
> do, is there a way to set it up so I'm only being nice to that
> wireless router rather than the whole Big Bad Internet?

Yes, it's just a different kind of Internet.

> gif0: flags=8011<UP,POINTOPOINT,MULTICAST> metric 0 mtu 1280
>        inet6 fe80::4639:c4ff:fe3a:d7ea%gif0 prefixlen 64 scopeid 0x3
>        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
>
> No endpoints are listed for gif0 and while I can ping my original IPv6
> address and its aliases....

This says there's a bug and suggests a workaround:

https://forums.freebsd.org/viewtopic.php?f=4&t=44747