# prevent neighbor solicitations and other low level ICMP messages from being 'marked', since
# it seems to trigger a kernel bug that prevents them being sent on the correct interface
ip6tables -t mangle -I OUTPUT 1 -o `nvram get wan_iface` -p icmpv6 \! --icmpv6-type echo-request -j RETURN