Hurricane Electric's IPv6 Tunnel Broker Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - cholzhauer

Pages: [1] 2 3
1
IPv6 on Linux & BSD & Mac / Issues receiving from Google domains on IPv6
« on: October 28, 2016, 08:35:02 AM »
I use a spam filtering appliance from SpamTitan.  For the last two days, I've not been able to receive email from Google domains (gmail or hosted) over IPv6...I get errors like this

Code: [Select]
Oct 27 13:25:55 mailfilter postfix/smtpd[9455]: lost connection after STARTTLS from paulie.lemoyne.amplex.net[2001:4950:1:b::3]
Oct 27 13:26:14 mailfilter postfix/smtpd[6357]: lost connection after STARTTLS from sylvio.lemoyne.amplex.net[2001:4950:1:b::2]
Oct 27 13:28:47 mailfilter postfix/smtpd[8473]: lost connection after STARTTLS from mail-oi0-x236.google.com[2607:f8b0:4003:c06::236]
Oct 27 13:28:49 mailfilter postfix/smtpd[9453]: lost connection after STARTTLS from mail-lf0-x230.google.com[2a00:1450:4010:c07::230]
Oct 27 13:29:01 mailfilter postfix/smtpd[5191]: lost connection after STARTTLS from mail154.gate137.n.mlgn2ca.com[188.131.137.154]
Oct 27 13:29:05 mailfilter postfix/smtpd[9331]: lost connection after STARTTLS from mail-oi0-x233.google.com[2607:f8b0:4003:c06::233]
Oct 27 13:29:06 mailfilter postfix/smtpd[10207]: lost connection after STARTTLS from mail-wm0-x22c.google.com[2a00:1450:400c:c09::22c]
Oct 27 13:29:40 mailfilter postfix/smtpd[9455]: lost connection after STARTTLS from paulie.lemoyne.amplex.net[2001:4950:1:b::3]
Oct 27 13:29:47 mailfilter postfix/smtpd[5189]: lost connection after STARTTLS from mail-qk0-x22d.google.com[2607:f8b0:400d:c09::22d]
Oct 27 13:29:56 mailfilter postfix/smtpd[6357]: lost connection after STARTTLS from mail-yb0-x230.google.com[2607:f8b0:4002:c09::230]
Oct 27 13:30:43 mailfilter postfix/smtpd[6886]: lost connection after STARTTLS from mail-yw0-x22b.google.com[2607:f8b0:4002:c05::22b]
Oct 27 13:30:49 mailfilter postfix/smtpd[6640]: lost connection after STARTTLS from mail-oi0-x22b.google.com[2607:f8b0:4003:c06::22b]
Oct 27 13:31:11 mailfilter postfix/smtpd[6808]: lost connection after STARTTLS from sylvio.lemoyne.amplex.net[2001:4950:1:b::2]
Oct 27 13:31:25 mailfilter postfix/smtpd[9453]: lost connection after STARTTLS from mail-qk0-x229.google.com[2607:f8b0:400d:c09::229]
Oct 27 13:31:37 mailfilter postfix/smtpd[10204]: lost connection after STARTTLS from mail-qt0-x233.google.com[2607:f8b0:400d:c0d::233]
Oct 27 13:32:51 mailfilter postfix/smtpd[9331]: lost connection after STARTTLS from mail-qt0-x246.google.com[2607:f8b0:400d:c0d::246]
Oct 27 13:33:05 mailfilter postfix/smtpd[10207]: lost connection after STARTTLS from mail-vk0-x233.google.com[2607:f8b0:400c:c05::233]
Oct 27 13:33:07 mailfilter postfix/smtpd[6872]: lost connection after STARTTLS from mail-oi0-x232.google.com[2607:f8b0:4003:c06::232]
Oct 27 13:33:09 mailfilter postfix/smtpd[9160]: lost connection after STARTTLS from mail-wm0-x22a.google.com[2a00:1450:400c:c09::22a]
Oct 27 13:35:56 mailfilter postfix/smtpd[6357]: lost connection after STARTTLS from paulie.lemoyne.amplex.net[2001:4950:1:b::3]
Oct 27 13:36:06 mailfilter postfix/smtpd[9331]: lost connection after STARTTLS from mail-qk0-x230.google.com[2607:f8b0:400d:c09::230]
Oct 27 13:36:16 mailfilter postfix/smtpd[6886]: lost connection after STARTTLS from mail-vk0-x231.google.com[2607:f8b0:400c:c05::231]
Oct 27 13:36:20 mailfilter postfix/smtpd[9453]: lost connection after STARTTLS from mail-yw0-x247.google.com[2607:f8b0:4002:c05::247]
Oct 27 13:36:27 mailfilter postfix/smtpd[9455]: lost connection after STARTTLS from mail-qk0-x235.google.com[2607:f8b0:400d:c09::235]
Oct 27 13:36:35 mailfilter postfix/smtpd[6808]: lost connection after STARTTLS from mail-yw0-x235.google.com[2607:f8b0:4002:c05::235]
Oct 27 13:36:39 mailfilter postfix/smtpd[5189]: lost connection after STARTTLS from sylvio.lemoyne.amplex.net[2001:4950:1:b::2]
Oct 27 13:37:05 mailfilter postfix/smtpd[6640]: lost connection after STARTTLS from mail-lf0-x230.google.com[2a00:1450:4010:c07::230]

The only "fix" I've found is to disable IPv6 on the appliance and remove my AAAA records, but I don't want to do that long term.

2
IPv6 on Windows / Server 2012 R2 questions
« on: March 25, 2016, 09:54:57 AM »
Two part question, kinda related, kinda not

1) Given that an interface has two IPv6 addresses,  is there a way to select which address gets published to DNS?

2) I have a server that's getting an RA address on a subnet that it's not on.  For example, it's getting a 2001:db8:1::/64 address when it's only on the 2001:db8:2::/64 subnet.  Any ideas?

3
IPv6 on Windows / Weighting addresses differently
« on: January 05, 2016, 01:04:18 PM »
I had thought there was a way to manually weight IPv6 addresses in Windows.  For example, if I had 2001:db8:1::1/64 and 2001:db8:2::1, I would be able to override the OS's selection of the "preferred" address, but I've been unable to find anything.

4
IPv6 on Routing Platforms / Routes to block on your IPv6 router
« on: April 29, 2014, 09:55:50 AM »
A few years ago I had posted asking which address ranges shouldn't be forwarded out of your network to the Internet.  Unfortunately I'm unable to find that post to update it, so I'll just start a new one with the latest information.

From http://www.team-cymru.org/ReadingRoom/Templates/IPv6Routers/xsp-recommendations.html

Quote
[2] Reject the packets which contain following special-use
            prefix in the source address field.

           - IETF reserved Address(formerly IPv4-compatible IPv6
             Address)                  :  ::/96
           - Loop back Address         :  ::1/128
           - IPv4-mapped IPv6 Address  :  ::ffff:0:0/96
           - Discard-Only Address      :  100::/64
           - TEREDO Address            :  2001::/32
           - Benchmarking Address      :  2001:2::/48
           - ORCHID Address            :  2001:10::/28
           - Documentation Address     :  2001:db8::/32
           - Unique-local Address      :  fc00::/7
           - IETF reserved Address(formerly Site-local Address)
                                       :  fec0::/10
           - Multicast Address         :  ff00::/8

5
IPv6 on Windows / Windows 8 does DHCPv6 by default
« on: April 07, 2014, 07:33:46 AM »
I was doing some playing around with a Server 2012 R2 DHCPv6 server today and noticed that Windows 8.1 will automatically pick up an address from DHCPv6.  (Windows 7 wouldn't do this without some configuration changes with netsh and some luck.)  It will also propagate IPv6 DNS servers automatically

FWIW FYI


6
IPv6 Basics & Questions & General Chatter / IPv6 on Verizon LTE
« on: November 27, 2012, 05:40:50 AM »
My spiffy new Galaxy S III includes the hotspot feature; I just turned it on to test some VPN issues and saw that I was receiving a IPv6 address.  I do have IPv6 connectivity (verified by pinging Google over IPv6 from an attached device)

I had checked for IPv6 connectivity a few weeks ago when I first received the phone, but it didn't have any, so as far as I know, this is a recent change.

However, when I connect to a Wifi network that has IPv6 running, the phone does not receive an IPv6 address.

7
IPv6 Basics & Questions & General Chatter / Results from IPv6 Day
« on: June 07, 2012, 07:22:36 AM »
Here's how our traffic changed



So really, we didn't see much of a change.

8
IPv6 on Linux & BSD & Mac / Disable Privacy Extensions for OSx Lion
« on: January 11, 2012, 11:07:06 AM »
Has anyone found a way to disable the privacy extensions for OSx Lion?

9
IPv6 Basics & Questions & General Chatter / HE DNS Whitelisting
« on: November 22, 2011, 05:50:51 AM »
I know many people here are pointing DNS lookups for google.com at ordns.he.net so they can take advantage of the white-listed Google IPv6 records.  I'm also pointing lookups for www.facebook.com at it so I get the AAAA records for that site.

I'm wondering if there are other sites that are white-listed that people don't know about; is there a list of white-listed domains that are served up by ordns.he.net?

10
IPv6 Basics & Questions & General Chatter / Autoconfigure IPv6 address
« on: October 20, 2011, 11:11:34 AM »
This may be a simple question, but I can't figure out the answer.

I have a DNS server that was using auto-configure to get an IPv6 address; that address ended in 41bd:d9bf:9b66:9b95

I recently converted that physical server to a virtual server, but since everyone was using the old address for DNS lookups, I assigned that same address to the "new" virtual server.  (The 41bd:d9bf:9b66:9b95 address)

So far, so good.

I then needed to re-use that old physical machine; I was careful to plug the network cable into the second ethernet port, figuring if I used the first ethernet port I would get the 41bd:d9bf:9b66:9b95 address from last time.

My curiosity got the best of me and I decided to see what would happen (figuring I would break DNS momentarily while packets were routed to the wrong place)  Much to my surprise, the new IPv6 address wasn't even close to being the same.

My question is, if the MAC address on the network card didn't change, shouldn't I have received the same IPv6 address when I re-installed the OS?

11
I'm curious to see if other people experienced the same traffic spike as we did.  According to vnstat, our traffic was way up for 6/8/11

Code: [Select]

      06/01/11    284.86 MiB |   54.37 MiB |  339.23 MiB |   32.16 kbit/s
      06/02/11    176.55 MiB |   33.79 MiB |  210.34 MiB |   19.94 kbit/s
      06/03/11    117.47 MiB |   25.39 MiB |  142.86 MiB |   13.55 kbit/s
      06/04/11     21.87 MiB |    6.84 MiB |   28.72 MiB |    2.72 kbit/s
      06/05/11     18.15 MiB |    4.73 MiB |   22.88 MiB |    2.17 kbit/s
      06/06/11    196.03 MiB |   41.81 MiB |  237.84 MiB |   22.55 kbit/s
      06/07/11    262.03 MiB |   44.90 MiB |  306.94 MiB |   29.10 kbit/s
      06/08/11    640.72 MiB |   76.85 MiB |  717.58 MiB |   68.04 kbit/s

12
One of the members of an IPv6 mailing list I'm a member of mentioned the fact that he was able to get an IPv6 address for www.facebook.com when he queried ordns.he.net

Is Facebook doing some sort of white-listing program like Google?

13
I'm sorry if you're unfortunate enough to be running Plesk, but I do applaud them for adding IPv6 support.

http://drdobbs.com/high-performance-computing/229400369?cid=nl_ddjupdate_2011-04-05_html


14
IPv6 Basics & Questions & General Chatter / IPv6 addressing plan
« on: March 16, 2011, 06:01:06 AM »
I came across this document from RIPE and thought I'd share it with everyone else

http://www.ripe.net/training/material/IPv6-for-LIRs-Training-Course/IPv6_addr_plan4.pdf

15
Questions & Answers / Ability to measure traffic?
« on: March 02, 2011, 06:52:17 AM »
It might be kind of neat to be able to look at how much traffic you're sucking down the tunnel

I'm sure this could be done client side as well, but what if there were a way to look at bandwidth usage on your tunnel on the HE site?

I assume that information already exists in HE on routers or something, so it'd just be a matter of displaying it to the end user. 

Pages: [1] 2 3