can't ping IPv6 tunnel endpoint

[McNail]

Hello,

I am using a HE IPv6 tunnel since a while on my Raspberry without issues. But since some weeks I didn't get IPv6 connections with the HE tunnel. I can ping mit local he-ipv6 interface (:2), but can't can ping the endpoint of this tunnel interface (:1), I just only get no answer.

If I ping the endpoint :1 from Internet everything is ok, but :2 (my local he-ipv6 interface) I also get no answer. The IPv4 address 216.66.80.30 of the HE tunnelserver is reachable.

I am currently a little bit lost how and where to start debugging, since creating/starting he-ipv6 interfae gives no further errors.

Regards
Ralf

[McNail]

I see with tcpdump that somehow IP protocol 41 seems to be blocked:

root@mydns(neu):/etc/network# tcpdump -nni eth0 host 216.66.80.30
11:48:34.021096 IP 10.90.90.252 > 216.66.80.30: IP6 2001:470:1f0a:911::2 > 2001:470:1f0a:911::1: ICMP6, echo request, id 34, seq 1, length 64
11:48:34.031283 IP 216.66.80.30 > 10.90.90.252: ICMP 216.66.80.30 protocol 41 port 48391 unreachable, length 132
11:48:35.047019 IP 10.90.90.252 > 216.66.80.30: IP6 2001:470:1f0a:911::2 > 2001:470:1f0a:911::1: ICMP6, echo request, id 34, seq 2, length 64
11:48:35.056647 IP 216.66.80.30 > 10.90.90.252: ICMP 216.66.80.30 protocol 41 port 48391 unreachable, length 132
11:48:36.071014 IP 10.90.90.252 > 216.66.80.30: IP6 2001:470:1f0a:911::2 > 2001:470:1f0a:911::1: ICMP6, echo request, id 34, seq 3, length 64

Maybe because of some update of my Fritzbox router IP protocal 41 is now blocked :-(

[McNail]

I solved it now. The update for my dynamic IPv4 address for the my client side tunnel endpoint failed. Somehow the syntax of the Dyn-compliant Endpoint Updates changed, so my script for the update failed.

https://forums.he.net/index.php?topic=1994.0

I've now updated my script (from crontab) and now HE IPv6 tunnel is up again.

Regards
Ralf