I'm a bit frustrated at this test. All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver". What does that mean? I looked around on the web and there seem to be a number of different ways to set your server for IPv6. How is the client trying to access it? It would help if you offered more details on the exact process you are following. I can do some research myself, but I need specifics instead of guessing. Also, debugging output on failures would be helpful.
Quote from: jeffno on April 27, 2009, 10:15:25 AM
I'm a bit frustrated at this test. All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver". What does that mean? I looked around on the web and there seem to be a number of different ways to set your server for IPv6. How is the client trying to access it? It would help if you offered more details on the exact process you are following. I can do some research myself, but I need specifics instead of guessing. Also, debugging output on failures would be helpful.
its doing: wget -6 on http://yourdomain.tld/code.txt
It doesn't get any easier to grab than that. So get your webserver/site *working on IPv6, and you won't fail the test.
*"working on IPv6" means getting it some form of IPv6 connectivity (native or tunneled) and creating an AAAA record in DNS pointing the site to the IPv6 address you've assigned to it.
Quote from: broquea on April 27, 2009, 11:31:22 AM
its doing: wget -6 on http://yourdomain.tld/code.txt
[...]
Thanks, your post was very helpful. I was able to get it working. I ended up using tunnelbroker for the server, which was easy and familiar after using it for the client in the previous step. This might be a good hint to add. Before it occurred to me, my head was spinning looking at all the docs and options on the net :-)
I'm having issues with this test as well.
As far as I can tell, I'm doing everything right, but the HTTP test is failing.
Test set up:
Could not grab the file via IPv6 HTTP
[Reset Test]
Help Step Description Data
[1] Generate a User Code txi34uc5iy
[2] Tell us what your IPv6 website is; FQDN please http://ipv6.shubjero.com/dump /
[3] We will test grabbing the file: http://ipv6.shubjero.com/dump/txi34uc5iy.txt
[4] Schedule the test:
Yet when I do a remote wget from a different IPv6 host, it works just fine.
shubjero@egon:~$ wget -6 http://ipv6.shubjero.com/dump/txi34uc5iy.txt
--04:03:18-- http://ipv6.shubjero.com/dump/txi34uc5iy.txt
=> `txi34uc5iy.txt.4'
Resolving ipv6.shubjero.com... 2001:470:1c:f0::2
Connecting to ipv6.shubjero.com|2001:470:1c:f0::2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/plain]
100%[==================================================================================================================>] 3 --.--K/s
04:03:18 (51.40 KB/s) - `txi34uc5iy.txt.4' saved [3/3]
Any help/suggestions would be greatly appreciated.
No AAAA record found for your domain name.
:~$ dig AAAA ipv6.shubjero.com
; <<>> DiG 9.5.0-P2 <<>> AAAA ipv6.shubjero.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48435
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;ipv6.shubjero.com. IN AAAA
;; ANSWER SECTION:
ipv6.shubjero.com. 85663 IN CNAME starbuck.shubjero.com.
;; AUTHORITY SECTION:
shubjero.com. 2988 IN SOA ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600
;; Query time: 2 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:42:36 2009
;; MSG SIZE rcvd: 120
:~$ dig AAAA starbuck.shubjero.com
; <<>> DiG 9.5.0-P2 <<>> AAAA starbuck.shubjero.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;starbuck.shubjero.com. IN AAAA
;; AUTHORITY SECTION:
shubjero.com. 2897 IN SOA ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600
;; Query time: 9 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:44:07 2009
;; MSG SIZE rcvd: 101
Public resolvers seem to be resolving it just fine
shubjero@egon:~$ dig ipv6.shubjero.com @4.2.2.1 AAAA
; <<>> DiG 9.3.2 <<>> ipv6.shubjero.com @4.2.2.1 AAAA
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55589
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;ipv6.shubjero.com. IN AAAA
;; ANSWER SECTION:
ipv6.shubjero.com. 43200 IN AAAA 2001:470:1c:f0::2
;; Query time: 190 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Thu May 21 21:48:31 2009
;; MSG SIZE rcvd: 63
reloaded caching server, works now. Was pretty sure i had a cron to automate this, but making sure there is one now.
Fantastic, thanks broquea.
The test worked now.
Hurray for enthusiast! :)
I'm having this same problem.
http://ipv6.home.core.arcticfire.net
It gives me the same error. I know that apache is accepting the IPv6 connection, because I can get to it from that computer. (using the domain or the IPv6 address) I don't think that DD-WRT is somehow firewalling the IPv6 traffic, but idk.
EDIT: I'm not sure if this will shed any light on the subject, but the tunnel is terminated on the computer, not at the router.
Quote from: arcticfire on July 19, 2009, 07:10:10 PM
http://ipv6.home.core.arcticfire.net
This URL fails to load for me.....
Does it atleast resolve to the right address for you? It should resolve to:
2001:470:1F06:6C5::2
telnet ipv6.home.core.arcticfire.net 80
Trying 2001:470:1f06:6c5::2...
just sits there trying to connect.
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.
EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
Quote from: arcticfire on July 20, 2009, 11:23:22 AM
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.
EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
Until someone familiar with iptables comments, have you tried not using/disabling/clearing/etc... on the ddwrt to test that it is an iptables configuration issue on the ddwrt?
http://www.dd-wrt.com/wiki/index.php/IPv6
iptables -t nat -D POSTROUTING -o vlan1 -j MASQUERADE
iptables -t nat -I POSTROUTING -p ! ipv6 -o vlan1 -j MASQUERADE
if don't work. use a "keepalive"
ping6 -i 40 Tunnel_Server_IPv6_address
Nothing seems to be working. I turned on logging on my router to see if it's blocking or allowing the packets, but it doesn't show it either way. I just get a bunch of dropped packets from my upstream router (my ISP's) with a protocol of "boot-pc". Kinda weird, but, still not helping.
IDK, I guess I'll just give up and try later.
It looks fairly simple but I am having this same issue.
DIG is resolving: dig AAAA mir.jumpingcrab.com
; <<>> DiG 9.5.1-P3 <<>> AAAA mir.jumpingcrab.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55093
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;mir.jumpingcrab.com. IN AAAA
;; ANSWER SECTION:
mir.jumpingcrab.com. 3253 IN AAAA 2001:470:1f04:d15::2
;; Query time: 14 msec
;; SERVER: 68.87.76.178#53(68.87.76.178)
;; WHEN: Mon Jul 5 11:44:56 2010
;; MSG SIZE rcvd: 65
I can browse the site and the code file: http://mir.jumpingcrab.com/6e83n6m5eh.txt
IPv6 Post Scan is working fine:
Starting Nmap 5.00 ( http://nmap.org ) at 2010-07-05 11:33 PDT
All 1000 scanned ports on mmir-1-pt.tunnel.tserv3.fmt2.ipv6.he.net (2001:470:1f04:d15::2) are filtered
Nmap done: 1 IP address (1 host up) scanned in 5.14 seconds
But the WGET is not working:
--2010-07-05 11:51:47-- http://mir.jumpingcrab.com/6e83n6m5eh.txt
Resolving mir.jumpingcrab.com... 2001:470:1f04:d15::2
Connecting to mir.jumpingcrab.com|2001:470:1f04:d15::2|:80... failed: Network is unreachable.
I am using Windows 2008 with IIS 7. I have a LinkSys router.
I even tried one of the suggestion to use Opera browser instead of FireFox.
I can't ping that host right now. Do you have the tunnel down?
Pings are blocked the nmap scans port with the -PN switch.
Because I am using a LinkSys router the pings are blocked by the firewall.
Thanks for checking.
Something definitely odd, but not with our side of the tunnel:
~$ host mir.jumpingcrab.com
mir.jumpingcrab.com has IPv6 address 2001:470:1f04:d15::2
~$ telnet mir.jumpingcrab.com 80
Trying 2001:470:1f04:d15::2...
telnet: connect to address 2001:470:1f04:d15::2: No route to host
~$ ping6 2001:470:1f04:d15::1
PING 2001:470:1f04:d15::1(2001:470:1f04:d15::1) 56 data bytes
64 bytes from 2001:470:1f04:d15::1: icmp_seq=1 ttl=62 time=0.307 ms
64 bytes from 2001:470:1f04:d15::1: icmp_seq=2 ttl=62 time=0.364 ms
64 bytes from 2001:470:1f04:d15::1: icmp_seq=3 ttl=62 time=0.309 ms
--- 2001:470:1f04:d15::1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.307/0.326/0.364/0.033 ms
It was surely frustrating.
I simply had to connect my machine directly with the eMTA and skip the routers. I had a hunch that my routers will fail me.
Thank you guys.