@bradfitz ("Brad Fitzpatrick") replied to a tweet by @bradfitz:
okay, IPv6 mostly working now:
I wonder if I'll ever have the netfilter flow chart (https://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg) memorized without consulting that. Also: policy routing and fwmark/connmark stuff hurts my head.