I was testing my IPv6 firewall rules a little while ago. I have rules allowing ICMPv6 for input and forward.
I’m using PD to assign an address to the interface on my internal network (xxxx::1/64).
Using my mobile phone, I decided to ping the address on my internal interface as well as a machine inside the internal network.
If I ping the internal interface (xxxx::1), my “input” rule increments.
If I ping a machine in my internal network (xxxx::/64, same subnet as the internal interface!), my “forward” rule increments.
This is not what I expect. I was thinking that if the router has to move the packet from one subnet to another, that would be a “forward” no matter what. Even if the endpoint exists in the router.
Am I wrong? Why?