Hurricane Electric's IPv6 Tunnel Broker Forums

Tunnelbroker.net Specific Topics => Questions & Answers => Topic started by: vextatl on January 30, 2011, 09:59:39 PM

Title: Issue with IPv6 Website
Post by: vextatl on January 30, 2011, 09:59:39 PM
Ok, I am having major trouble with the test after enthusiast.  I have an apache server running with an IPv6 address and the designated file in the root directory.  I have updated my DNS provider to map the URL to the appropriate IPv6 address (of the server itself).  I can ping the server by using ping6 from a remote location.  I can also wget the file using the full URL remotely.  The only problem is that the he.net site can't download the file for some reason.  Any ideas or suggestions?  Has anyone run into this?  Also, the DNS settings were changed 4-5 days ago so it shouldn't be an issue with DNS changes not having time to propagate. 

Thanks!!


Vext
Title: Re: Issue with IPv6 Website
Post by: cholzhauer on January 31, 2011, 05:08:33 AM
Gonna need some more information...what's the website? What's the link you're telling HE to get?
Title: Re: Issue with IPv6 Website
Post by: torero on January 31, 2011, 06:06:47 AM
Hello Vext,

Try and put the results with http://www.ipv6-test.com/validate.php

Salu2
Alo
Title: Re: Issue with IPv6 Website
Post by: vextatl on January 31, 2011, 12:41:35 PM
Thanks for the quick response.  The website is http://ipv6.thelombard.net.  Thanks for the troubleshooting site.  It says that my AAAA record is valid, but my website is not IPv6 compliant.  I will have to dig into the Apache side (not my strong point).


Vext
Title: Re: Issue with IPv6 Website
Post by: cholzhauer on January 31, 2011, 12:43:18 PM
Yeah, AAAA looks fine


C:\Users\cholzhauer>nslookup ipv6.thelombard.net
Server:  patty.sscorp.com
Address:  2001:470:c27d:e000:41bd:d9bf:9b66:9b95

Name:    ipv6.thelombard.net
Address:  2001:470:e2b5:dead:230:48ff:fe5f:abf1


What OS?  if linux/unix, do a "netstat -a" and see if Apache is listening on IPv6.  All newer versions do by default, so unless you've changed something, it should "just work"
Title: Re: Issue with IPv6 Website
Post by: vextatl on January 31, 2011, 01:05:45 PM
Running Centos 5.x.  Here is the output from a netstat:

netstat -tulpn -

tcp        0      0 2001:470:e2b5:dead:230:4:80 :::*                        LISTEN      15704/httpd


netstat -a -
tcp        0      0 2001:470:e2b5:dead:230:http *:*                         LISTEN     

Title: Re: Issue with IPv6 Website
Post by: cholzhauer on January 31, 2011, 01:12:48 PM
That address doesn't match the one my AAAA lookup did, unless it got cut off some how
Title: Re: Issue with IPv6 Website
Post by: vextatl on January 31, 2011, 01:44:38 PM
It looks like netstat has fixed column widths and cuts off whatever doesn't fit.  I can pull up the site remotely using the full address:  http://[2001:470:e2b5:dead:230:48ff:fe5f:abf1]

The output from netstat matches to a point:
2001:470:e2b5:dead:230:      (netstat -a)
2001:470:e2b5:dead:230:4    (netstat -tulpn)
2001:470:e2b5:dead:230:48ff:fe5f:abf1    (actual address)

Not sure what I did wrong in the httpd.conf file.
Title: Re: Issue with IPv6 Website
Post by: cholzhauer on February 01, 2011, 05:21:34 AM
Your configuration file looks fine...according to netstat, apache is listening on the v6 address for connections.

Do you have a firewall that's blocking access?

Are you able to telnet to that port on your server?

EDIT:

You must be doing some sort of firewalling



C:\Users\cholzhauer>ping ipv6.thelombard.net

Pinging ipv6.thelombard.net [2001:470:e2b5:dead:230:48ff:fe5f:abf1] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 2001:470:e2b5:dead:230:48ff:fe5f:abf1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Title: Re: Issue with IPv6 Website
Post by: vextatl on February 01, 2011, 07:17:57 PM
Well, I do have a firewall in place.  However, I have a rule allowing traffic from the Internet over port 80 to the website (2001:470:e2b5:dead:230:48ff:fe5f:abf1).  I wasn't allowing ICMP or ICMP6 before, but I have enabled those since.  You should be able to ping the site now.  I am using a built in service for http and it's possible that the alg is jacked up or something.  I am going to change it to just be port 80 and see if that works.
Title: Re: Issue with IPv6 Website
Post by: cholzhauer on February 02, 2011, 07:59:36 AM
Nope, no ping


[carl@mars ~]$ ping6 ipv6.thelombard.net
PING6(56=40+8+8 bytes) 2001:470:c27d:e000:20c:29ff:fe8a:1618 --> 2001:470:e2b5:dead:230:48ff:fe5f:abf1
^C
--- ipv6.thelombard.net ping6 statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss