howto/mikrotik/modern-style.md
... ...
@@ -194,7 +194,7 @@ add afi=ipv6 as=424242<YOUR_ASN> disabled=no input.filter=dn42-in instance=DN42
194 194
Preferred Source Address
195 195
----
196 196
197
-By default, the router's own outgoing traffic will use the respective tunnel's address, which is link-local and so won't get routed. You can give your router an address from your allocation by assigning it to an existing interface or by creating an empty bridge. Then you need to modify the `accept` filter in the `dn42-in` in order to set it as the preferred address for all routes:
197
+By default, the router's own outgoing traffic will use the respective tunnel's address, which is link-local and so won't get routed. You can give your router an address from your allocation by assigning it to an existing interface or by creating an empty bridge. Then you need to **replace the `accept` filter** in the `dn42-in` filter in order to set the the preferred address for all routes:
198 198
199 199
```
200 200
/interface/bridge
... ...
@@ -205,3 +205,10 @@ add address=<YOUR_ALLOCATED_SUBNET>::1/64 advertise=no interface=dn42-dummy
205 205
add chain=dn42-in comment="set source address and accept" rule=\
206 206
"if (dst in fd00::/8) { set pref-src <YOUR_ALLOCATED_SUBNET>::1; accept }"
207 207
```
208
+
209
+However, this will *not* affect ICMP errors generated by the router on Wireguard tunnels (those errors that make it show up in a traceroute). To fix traceroute, you also *need to add the ULA address to each tunnel**:
210
+
211
+```
212
+/ipv6/address
213
+add address=<YOUR_ALLOCATED_SUBNET>::1/128 advertise=no interface=DN42-KIOUBIT
214
+```
... ...
\ No newline at end of file