Problem: " Could not grab the file via IPv6 HTTP "

[acma]

Hi guys,

I've read a few topics about the same problem here but, despite the same message, I think my problem is different.

I've received from the certification page the link as http://ipv6.ces.eti.br/fxxd86upzt.txt. When I hit "Test It!", the page reports back "Could not grab the file via IPv6 HTTP". The problem is that I actually CAN grab the file both locally and remotely from another site.
Not only a do can grab the file, I'm also accessing this server remotely (both WWW and SSH) via IPv6 from another network (two others, actually).

I'm in control of my DNS records and the AAAA is resolving correctly (hence the web access thru IPv6).

Any ideas?

Thanks in advance!

Carlos Strauch

[cholzhauer]

It works for me too, but HE doesn't know about it

Code Select Expand



[carl@mars]$ dig aaaa ipv6.ces.eti.br @2001:470:200::2

; <<>> DiG 9.6.2-P2 <<>> aaaa ipv6.ces.eti.br @2001:470:200::2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 31766
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ipv6.ces.eti.br.               IN      AAAA

;; Query time: 107 msec
;; SERVER: 2001:470:200::2#53(2001:470:200::2)
;; WHEN: Wed Nov 24 14:35:54 2010
;; MSG SIZE  rcvd: 33



How long ago did you enter the DNS information?  Might have to wait a day or so, or email ipv6@he.net to have them kick the server

[acma]

I entered the info yesterday.

But I think you mistyped the address (2001:470:200::2 instead of 2001:470:20::2). I've tried and that's the result:

Code Select Expand


root@Apolo:~# dig ipv6.ces.eti.br @2001:470:20::2 AAAA

; <<>> DiG 9.7.1-P2 <<>> ipv6.ces.eti.br @2001:470:20::2 AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50965
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.ces.eti.br.               IN      AAAA

;; ANSWER SECTION:
ipv6.ces.eti.br.        27534   IN      AAAA    2001:470:1f07:cd6:21d:92ff:febc:26c3

;; Query time: 172 msec
;; SERVER: 2001:470:20::2#53(2001:470:20::2)
;; WHEN: Wed Nov 24 16:49:04 2010
;; MSG SIZE  rcvd: 61

root@Apolo:~#


So the server at he.net should know about my server... Strange...  :-\

[cholzhauer]

nah, that's the address for ns2.he.net and the one I always use.

Code Select Expand


[carl@mars]$ host ns2.he.net
ns2.he.net has address 216.218.131.2
ns2.he.net has IPv6 address 2001:470:200::2


[acma]

nah, that's the address for ns2.he.net and the one I always use.

Code Select Expand


[carl@mars]$ host ns2.he.net
ns2.he.net has address 216.218.131.2
ns2.he.net has IPv6 address 2001:470:200::2


Hmmm... Very strange...
One server has the info ("opcode: QUERY, status: NOERROR, id: 50965") and the other one doesn't ("opcode: QUERY, status: SERVFAIL, id: 31766") ???

[broquea]

retest, flushed cache

[acma]

Thanks, man. That seemed to do the trick.
Already passes that step. I only hope the next one works too.  :D

[ag33k]

im having a similar problem.

Im not 100% sure I have set my IIS server up correctly but it appears to be working fine.

my domain name id d33n.ag33k.net it should hopefully resolve to 2001:470:1f08:113e::2

I'll run through my set up quickly.

Draytek 2710n in routed mode, my windows 7 machine has one of my 8 IPv4s and my FreeNAS (FreeSBD based) box has another.  I terminated one tunnel on my W7 and one on my NAS.

Opened up protocol 41 in the firewall and i can confirm i get an IPv6 Address as above.  I have tried both apache on the NAS and IIS on W7.

THanks

[cholzhauer]

DNS does indeed work

Code Select Expand


[carl@mars ~]$ host d33n.ag33k.net
d33n.ag33k.net has IPv6 address 2001:470:1f08:113e::2


I can ping the address, but I am unable to connect via HTTP.

IIS should listen on IPv6 by default...did you allow HTTP connections to that host via IPv6 in your firewall?

[ag33k]

sorted, windows firewall after all.

Any tips on what to enable, i just turned it off for a few mins.  I have opened up ICMPv6 and Protocol 41 which it lists as IPV6 as well as http

[cholzhauer]

If you want to keep getting the certs, you'll want to enable SMTP as well.

[ewanm89]

I'm having the same problem with http://ewanm89.co.uk/262sc8ss8a.txt, I can get it over ipv6 http myself, but the certification server can't seem to. Even though he.net nameservers are my SOA servers and AAAA record is set.

[cholzhauer]

I think I can get to your file, but it looks like there's nothing in it to get?

I think you should place some text into the file..."262sc8ss8a.txt" would be a good start.

Other than that, DNS looks correct and HE knows about it

Code Select Expand



[carl@mars ~]$ dig aaaa ewanm89.co.uk @ns2.he.net

; <<>> DiG 9.6.2-P2 <<>> aaaa ewanm89.co.uk @ns2.he.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58294
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ewanm89.co.uk.                 IN      AAAA

;; ANSWER SECTION:
ewanm89.co.uk.          86400   IN      AAAA    2a01:7b8:2000:26::1

;; Query time: 112 msec
;; SERVER: 2001:470:200::2#53(2001:470:200::2)
;; WHEN: Tue Dec 21 09:14:08 2010
;; MSG SIZE  rcvd: 59


Oh, this is interesting

Code Select Expand



[carl@mars ~]$ wget http://ewanm89.co.uk/262sc8ss8a.txt
--2010-12-21 09:15:02--  http://ewanm89.co.uk/262sc8ss8a.txt
Resolving ewanm89.co.uk... 2a01:7b8:2000:26::1, 95.172.5.58
Connecting to ewanm89.co.uk|2a01:7b8:2000:26::1|:80... failed: Connection refused.
Connecting to ewanm89.co.uk|95.172.5.58|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 0 [text/plain]
Saving to: `262sc8ss8a.txt.1'

   [ <=>                                                                                                                                        ] 0           --.-K/s   in 0s

2010-12-21 09:15:03 (0.00 B/s) - `262sc8ss8a.txt.1' saved [0/0]


I can get your file over IPv4, but not IPv6