Hurricane Electric's IPv6 Tunnel Broker Forums

IPv6 Certification Program Topics => General Discussion => Topic started by: jeffno on April 27, 2009, 10:15:25 AM

Title: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: jeffno on April 27, 2009, 10:15:25 AM
I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: broquea on April 27, 2009, 11:31:22 AM
I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.

its doing: wget -6 on http://yourdomain.tld/code.txt

It doesn't get any easier to grab than that. So get your webserver/site *working on IPv6, and you won't fail the test.

*"working on IPv6" means getting it some form of IPv6 connectivity (native or tunneled) and creating an AAAA record in DNS pointing the site to the IPv6 address you've assigned to it.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: jeffno on April 27, 2009, 02:56:15 PM

its doing: wget -6 on http://yourdomain.tld/code.txt
[...]

Thanks, your post was very helpful.  I was able to get it working.  I ended up using tunnelbroker for the server, which was easy and familiar after using it for the client in the previous step.  This might be a good hint to add.  Before it occurred to me, my head was spinning looking at all the docs and options on the net :-)
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: shubjero on May 21, 2009, 12:59:49 AM
I'm having issues with this test as well.

As far as I can tell, I'm doing everything right, but the HTTP test is failing.

Test set up:

Could not grab the file via IPv6 HTTP

[Reset Test]

Help   Step   Description   Data
   [1]   Generate a User Code    txi34uc5iy
   [2]   Tell us what your IPv6 website is; FQDN please    http://ipv6.shubjero.com/dump /
   [3]   We will test grabbing the file:    http://ipv6.shubjero.com/dump/txi34uc5iy.txt
   [4]   Schedule the test:

Yet when I do a remote wget from a different IPv6 host, it works just fine.

Code: [Select]
shubjero@egon:~$ wget -6 http://ipv6.shubjero.com/dump/txi34uc5iy.txt 
--04:03:18--  http://ipv6.shubjero.com/dump/txi34uc5iy.txt
           => `txi34uc5iy.txt.4'
Resolving ipv6.shubjero.com... 2001:470:1c:f0::2
Connecting to ipv6.shubjero.com|2001:470:1c:f0::2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/plain]

100%[==================================================================================================================>] 3             --.--K/s             

04:03:18 (51.40 KB/s) - `txi34uc5iy.txt.4' saved [3/3]

Any help/suggestions would be greatly appreciated.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: tykimus on May 21, 2009, 11:44:26 AM
No AAAA record found for your domain name.

:~$ dig AAAA ipv6.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA ipv6.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48435
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.      IN   AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.   85663   IN   CNAME   starbuck.shubjero.com.

;; AUTHORITY SECTION:
shubjero.com.      2988   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 2 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:42:36 2009
;; MSG SIZE  rcvd: 120

:~$ dig AAAA starbuck.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA starbuck.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;starbuck.shubjero.com.      IN   AAAA

;; AUTHORITY SECTION:
shubjero.com.      2897   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 9 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:44:07 2009
;; MSG SIZE  rcvd: 101

Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: shubjero on May 21, 2009, 06:49:40 PM
Public resolvers seem to be resolving it just fine

Code: [Select]
shubjero@egon:~$ dig ipv6.shubjero.com @4.2.2.1 AAAA

; <<>> DiG 9.3.2 <<>> ipv6.shubjero.com @4.2.2.1 AAAA
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55589
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.             IN      AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.      43200   IN      AAAA    2001:470:1c:f0::2

;; Query time: 190 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Thu May 21 21:48:31 2009
;; MSG SIZE  rcvd: 63
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: broquea on May 21, 2009, 07:54:15 PM
reloaded caching server, works now. Was pretty sure i had a cron to automate this, but making sure there is one now.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: shubjero on May 27, 2009, 06:54:42 AM
Fantastic, thanks broquea.

The test worked now.

Hurray for enthusiast! :)
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: arcticfire on July 19, 2009, 07:10:10 PM
I'm having this same problem.

http://ipv6.home.core.arcticfire.net

It gives me the same error. I know that apache is accepting the IPv6 connection, because I can get to it from that computer. (using the domain or the IPv6 address) I don't think that DD-WRT is somehow firewalling the IPv6 traffic, but idk.

EDIT: I'm not sure if this will shed any light on the subject, but the tunnel is terminated on the computer, not at the router.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: kriteknetworks on July 20, 2009, 05:46:44 AM
http://ipv6.home.core.arcticfire.net

This URL fails to load for me.....
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: arcticfire on July 20, 2009, 11:14:31 AM
Does it atleast resolve to the right address for you? It should resolve to:

2001:470:1F06:6C5::2
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: broquea on July 20, 2009, 11:17:14 AM
Code: [Select]
telnet ipv6.home.core.arcticfire.net 80
Trying 2001:470:1f06:6c5::2...

just sits there trying to connect.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: arcticfire on July 20, 2009, 11:23:22 AM
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: broquea on July 21, 2009, 04:58:00 PM
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?

Until someone familiar with iptables comments, have you tried not using/disabling/clearing/etc... on the ddwrt to test that it is an iptables configuration issue on the ddwrt?
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: tufinhas on July 21, 2009, 07:06:33 PM
http://www.dd-wrt.com/wiki/index.php/IPv6

Code: [Select]
iptables -t nat -D POSTROUTING -o vlan1 -j MASQUERADE
iptables -t nat -I POSTROUTING -p ! ipv6 -o vlan1 -j MASQUERADE

if don't work. use a "keepalive"

ping6 -i 40 Tunnel_Server_IPv6_address
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: arcticfire on July 21, 2009, 09:22:50 PM
Nothing seems to be working. I turned on logging on my router to see if it's blocking or allowing the packets, but it doesn't show it either way. I just get a bunch of dropped packets from my upstream router (my ISP's) with a protocol of "boot-pc". Kinda weird, but, still not helping.

IDK, I guess I'll just give up and try later.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: pegali on July 05, 2010, 11:54:11 AM
It looks fairly simple but I am having this same issue.

DIG is resolving: dig AAAA mir.jumpingcrab.com

Code: [Select]
; <<>> DiG 9.5.1-P3 <<>> AAAA mir.jumpingcrab.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55093
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mir.jumpingcrab.com. IN AAAA

;; ANSWER SECTION:
mir.jumpingcrab.com. 3253 IN AAAA 2001:470:1f04:d15::2

;; Query time: 14 msec
;; SERVER: 68.87.76.178#53(68.87.76.178)
;; WHEN: Mon Jul  5 11:44:56 2010
;; MSG SIZE  rcvd: 65

I can browse the site and the code file: http://mir.jumpingcrab.com/6e83n6m5eh.txt
IPv6 Post Scan is working fine:

Code: [Select]
Starting Nmap 5.00 ( http://nmap.org ) at 2010-07-05 11:33 PDT
All 1000 scanned ports on mmir-1-pt.tunnel.tserv3.fmt2.ipv6.he.net (2001:470:1f04:d15::2) are filtered

Nmap done: 1 IP address (1 host up) scanned in 5.14 seconds
But the WGET is not working:
Code: [Select]
--2010-07-05 11:51:47--  http://mir.jumpingcrab.com/6e83n6m5eh.txt
Resolving mir.jumpingcrab.com... 2001:470:1f04:d15::2
Connecting to mir.jumpingcrab.com|2001:470:1f04:d15::2|:80... failed: Network is unreachable.

I am using Windows 2008 with IIS 7. I have a LinkSys router.

I even tried one of the suggestion to use Opera browser instead of FireFox.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: jimb on July 05, 2010, 12:43:18 PM
I can't ping that host right now.  Do you have the tunnel down?
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: pegali on July 05, 2010, 04:00:10 PM
Pings are blocked the nmap scans port with the -PN switch.

Because I am using a LinkSys router the pings are blocked by the firewall.

Thanks for checking.
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: broquea on July 05, 2010, 04:28:19 PM
Something definitely odd, but not with our side of the tunnel:
Code: [Select]
~$ host mir.jumpingcrab.com
mir.jumpingcrab.com has IPv6 address 2001:470:1f04:d15::2

~$ telnet mir.jumpingcrab.com 80
Trying 2001:470:1f04:d15::2...
telnet: connect to address 2001:470:1f04:d15::2: No route to host

~$ ping6 2001:470:1f04:d15::1
PING 2001:470:1f04:d15::1(2001:470:1f04:d15::1) 56 data bytes
64 bytes from 2001:470:1f04:d15::1: icmp_seq=1 ttl=62 time=0.307 ms
64 bytes from 2001:470:1f04:d15::1: icmp_seq=2 ttl=62 time=0.364 ms
64 bytes from 2001:470:1f04:d15::1: icmp_seq=3 ttl=62 time=0.309 ms

--- 2001:470:1f04:d15::1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.307/0.326/0.364/0.033 ms
Title: Re: Enthusiast: Could not grab the file via IPv6 HTTP
Post by: pegali on July 08, 2010, 05:24:06 AM
It was surely frustrating.

I simply had to connect my machine directly with the eMTA and skip the routers. I had a hunch that my routers will fail me.

Thank you guys.