I must being doing something stupid. I used to have this working, and now, no matter how much I try to simplify the situation, I can't seem to get any imcoming traffic on my tunnel.
I have an Ubuntu 12.04 box that does PPPoE to my ISP. Over that, it runs a HE tunnel. I can see packets going out like they should, but nothing comes in.
The Settings I should have from my tunnel page:
Server IPv4 Address:216.218.226.238
Server IPv6 Address:2001:470:a:29f::1/64
Client IPv4 Address:65.38.57.123 <- Automatically updated, I did check to make sure this is actually my IP
Client IPv6 Address:2001:470:a:29f::2/64
Routed IPv6 Prefixes
Routed /64:2001:470:b:29f::/64
Routed /48:2001:470:e89d::/48
/etc/network/interfaces entry:
auto he-ipv6
iface he-ipv6 inet6 v4tunnel
endpoint 216.218.226.238
# address 2001:470:e89d::1
# netmask 128
address 2001:470:a:29f::2
netmask 64
ttl 64
# up ip -6 route add 2001:470:a:29f::/64 dev he-ipv6
up ip -6 route add default dev he-ipv6
down ip -6 route del default dev he-ipv6
# down ip -6 route del 2001:470:a:29f::/64 dev he-ipv6
(The commented lines are what I had before. Before, I did not have the 2001:470:a:29f::2 address on the tunnel, I just set up a route for that block to the tunnel, and used an address from my /48. I changed that to what it should be to try to simplify it, but it still did not work).
Routing table:
ip -6 route show
2001:470:a:29f::/64 via :: dev he-ipv6 proto kernel metric 256
2001:470:e89d:9ab6::/64 dev eth7 proto kernel metric 256
2001:470:e89d:a272::/64 dev wlan2 proto kernel metric 256
2001:470:e89d:d000::/64 dev virts proto kernel metric 256
2001:470:e89d:e83c::/64 dev wlan1 proto kernel metric 256
fe80::/64 dev wlan1 proto kernel metric 256
fe80::/64 dev wlan2 proto kernel metric 256
fe80::/64 dev eth7 proto kernel metric 256
fe80::/64 dev virts proto kernel metric 256
fe80::/64 dev vboxnet1 proto kernel metric 256
fe80::/64 dev vboxnet0 proto kernel metric 256
fe80::/64 dev eth0 proto kernel metric 256
fe80::/64 via :: dev he-ipv6 proto kernel metric 256
default dev he-ipv6 metric 1024
ip6tables-save output:
# Generated by ip6tables-save v1.4.12 on Tue Oct 9 22:48:08 2012
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [3024:253440]
:OUTPUT ACCEPT [10911:934608]
:ufw6-after-forward - [0:0]
:ufw6-after-input - [0:0]
:ufw6-after-logging-forward - [0:0]
:ufw6-after-logging-input - [0:0]
:ufw6-after-logging-output - [0:0]
:ufw6-after-output - [0:0]
:ufw6-before-forward - [0:0]
:ufw6-before-input - [0:0]
:ufw6-before-logging-forward - [0:0]
:ufw6-before-logging-input - [0:0]
:ufw6-before-logging-output - [0:0]
:ufw6-before-output - [0:0]
:ufw6-logging-allow - [0:0]
:ufw6-logging-deny - [0:0]
:ufw6-reject-forward - [0:0]
:ufw6-reject-input - [0:0]
:ufw6-reject-output - [0:0]
:ufw6-skip-to-policy-forward - [0:0]
:ufw6-skip-to-policy-input - [0:0]
:ufw6-skip-to-policy-output - [0:0]
:ufw6-track-input - [0:0]
:ufw6-track-output - [0:0]
:ufw6-user-forward - [0:0]
:ufw6-user-input - [0:0]
:ufw6-user-limit - [0:0]
:ufw6-user-limit-accept - [0:0]
:ufw6-user-logging-forward - [0:0]
:ufw6-user-logging-input - [0:0]
:ufw6-user-logging-output - [0:0]
:ufw6-user-output - [0:0]
-A INPUT -j ufw6-before-logging-input
-A INPUT -j ufw6-before-input
-A INPUT -j ufw6-after-input
-A INPUT -j ufw6-after-logging-input
-A INPUT -j ufw6-reject-input
-A INPUT -j ufw6-track-input
-A FORWARD -j ufw6-before-logging-forward
-A FORWARD -j ufw6-before-forward
-A FORWARD -j ufw6-after-forward
-A FORWARD -j ufw6-after-logging-forward
-A FORWARD -j ufw6-reject-forward
-A OUTPUT -j ufw6-before-logging-output
-A OUTPUT -j ufw6-before-output
-A OUTPUT -j ufw6-after-output
-A OUTPUT -j ufw6-after-logging-output
-A OUTPUT -j ufw6-reject-output
-A OUTPUT -j ufw6-track-output
-A ufw6-after-input -p udp -m udp --dport 137 -j ufw6-skip-to-policy-input
-A ufw6-after-input -p udp -m udp --dport 138 -j ufw6-skip-to-policy-input
-A ufw6-after-input -p tcp -m tcp --dport 139 -j ufw6-skip-to-policy-input
-A ufw6-after-input -p tcp -m tcp --dport 445 -j ufw6-skip-to-policy-input
-A ufw6-after-input -p udp -m udp --dport 67 -j ufw6-skip-to-policy-input
-A ufw6-after-input -p udp -m udp --dport 68 -j ufw6-skip-to-policy-input
-A ufw6-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
-A ufw6-before-forward -i vpner -j REJECT --reject-with icmp6-addr-unreachable
-A ufw6-before-forward -o vpner -j REJECT --reject-with icmp6-addr-unreachable
-A ufw6-before-forward -j ufw6-user-forward
-A ufw6-before-input -i lo -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw6-before-input -m state --state INVALID -j ufw6-logging-deny
-A ufw6-before-input -m state --state INVALID -j DROP
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT
-A ufw6-before-input -p ipv6-icmp -m icmp6 --icmpv6-type 128 -j ACCEPT
-A ufw6-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A ufw6-before-input -s ff00::/8 -p ipv6-icmp -j ACCEPT
-A ufw6-before-input -d ff00::/8 -p ipv6-icmp -j ACCEPT
-A ufw6-before-input -s ff00::/8 -p ipv6-icmp -j ACCEPT
-A ufw6-before-input -d ff00::/8 -p ipv6-icmp -j ACCEPT
-A ufw6-before-input -j ufw6-user-input
-A ufw6-before-output -o lo -j ACCEPT
-A ufw6-before-output -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-output -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-output -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw6-before-output -j ufw6-user-output
-A ufw6-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
-A ufw6-logging-deny -m state --state INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
-A ufw6-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
-A ufw6-reject-input -j REJECT --reject-with icmp6-port-unreachable
-A ufw6-skip-to-policy-forward -j ACCEPT
-A ufw6-skip-to-policy-input -j REJECT --reject-with icmp6-port-unreachable
-A ufw6-skip-to-policy-output -j ACCEPT
-A ufw6-track-output -p tcp -m state --state NEW -j ACCEPT
-A ufw6-track-output -p udp -m state --state NEW -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 80 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 8887 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 8887 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 53 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 53 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 25 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 22 -j ACCEPT
-A ufw6-user-input -s 2001:470:e89d::/48 -p tcp -m tcp --dport 3142 -j ACCEPT
-A ufw6-user-input -s 2001:470:e89d::/48 -p tcp -m multiport --dports 135:139 -j ACCEPT
-A ufw6-user-input -s 2001:470:e89d::/48 -p tcp -m tcp --dport 445 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 3142 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 546 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 546 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 547 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 547 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 67 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 10990 -j ACCEPT
-A ufw6-user-input -p udp -m udp --dport 10990 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 443 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 81 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 444 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 27061 -j ACCEPT
-A ufw6-user-input -p tcp -m tcp --dport 27061 -m comment --comment "\'dapp_SymformContribution\'" -j ACCEPT
-A ufw6-user-output -p udp -m udp --sport 5353 --dport 5353 -j DROP
COMMIT
# Completed on Tue Oct 9 22:48:08 2012
ifconfig of all interfaces, he-ipv6 is the tunnel:
he-ipv6 Link encap:IPv6-in-IPv4
inet6 addr: fe80::c0a8:d01/64 Scope:Link
inet6 addr: fe80::c0a8:701/64 Scope:Link
inet6 addr: fe80::c0a8:601/64 Scope:Link
inet6 addr: fe80::c0a8:901/64 Scope:Link
inet6 addr: fe80::c0a8:7a01/64 Scope:Link
inet6 addr: fe80::4126:397b/64 Scope:Link
inet6 addr: fe80::c0a8:3901/64 Scope:Link
inet6 addr: 2001:470:a:29f::2/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MTU:1472 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:1790 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:168900 (168.9 KB)
eth0 Link encap:Ethernet HWaddr 00:1d:60:0d:7d:32
inet6 addr: fe80::21d:60ff:fe0d:7d32/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:5174897 errors:0 dropped:0 overruns:0 frame:0
TX packets:3901144 errors:0 dropped:0 overruns:0 carrier:8
collisions:0 txqueuelen:1000
RX bytes:5138513483 (5.1 GB) TX bytes:472369388 (472.3 MB)
eth7 Link encap:Ethernet HWaddr 00:02:b3:ea:9a:b6
inet addr:192.168.7.1 Bcast:192.168.7.255 Mask:255.255.255.0
inet6 addr: 2001:470:e89d:9ab6::1/64 Scope:Global
UP BROADCAST PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eth10 Link encap:Ethernet HWaddr 00:22:b0:70:9e:07
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Interrupt:20
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1310964 errors:0 dropped:0 overruns:0 frame:0
TX packets:1310964 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:187944008 (187.9 MB) TX bytes:187944008 (187.9 MB)
mon.wlan1 Link encap:UNSPEC HWaddr 1C-BD-B9-D5-E8-3C-00-00-00-00-00-00-00-00-00-00
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:433686 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:35568363 (35.5 MB) TX bytes:0 (0.0 B)
ppp0 Link encap:Point-to-Point Protocol
inet addr:65.38.57.123 P-t-P:65.38.57.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:1226715 errors:0 dropped:0 overruns:0 frame:0
TX packets:899822 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:1156405170 (1.1 GB) TX bytes:86652021 (86.6 MB)
vboxnet0 Link encap:Ethernet HWaddr 0a:00:27:00:00:00
inet6 addr: fe80::800:27ff:fe00:0/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:46084 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:2784592 (2.7 MB)
vboxnet1 Link encap:Ethernet HWaddr 0a:00:27:00:00:01
inet addr:192.168.57.1 Bcast:192.168.57.255 Mask:255.255.255.0
inet6 addr: fe80::800:27ff:fe00:1/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:73356 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:4394330 (4.3 MB)
virbr0 Link encap:Ethernet HWaddr 36:fd:75:be:7f:35
inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
virts Link encap:Ethernet HWaddr 0a:00:27:00:00:00
inet addr:192.168.13.1 Bcast:0.0.0.0 Mask:255.255.255.0
inet6 addr: fe80::7c12:70ff:fea7:b446/64 Scope:Link
inet6 addr: 2001:470:e89d:d000::1/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:29933 errors:0 dropped:0 overruns:0 frame:0
TX packets:30088 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1257403 (1.2 MB) TX bytes:2762655 (2.7 MB)
wlan1 Link encap:Ethernet HWaddr 1c:bd:b9:d5:e8:3c
inet addr:192.168.9.1 Bcast:192.168.9.255 Mask:255.255.255.0
inet6 addr: fe80::1ebd:b9ff:fed5:e83c/64 Scope:Link
inet6 addr: 2001:470:e89d:e83c::1/64 Scope:Global
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:406746 errors:0 dropped:0 overruns:0 frame:0
TX packets:466314 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:44592140 (44.5 MB) TX bytes:276449125 (276.4 MB)
wlan2 Link encap:Ethernet HWaddr 1c:bd:b9:d5:e8:3d
inet addr:192.168.6.1 Bcast:0.0.0.0 Mask:255.255.255.0
inet6 addr: fe80::1ebd:b9ff:fed5:e83d/64 Scope:Link
inet6 addr: 2001:470:e89d:a272::1/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:843193 errors:0 dropped:0 overruns:0 frame:0
TX packets:1030381 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:132651777 (132.6 MB) TX bytes:998429566 (998.4 MB)
Not sure what else could/would be of help figuring this out.