Ok,
As much as I hate to do this, I have to ask for assistance.
I have my domain established, I have apache working.
I have the host pingable via HE's tools.
I can grab my file locally, I even see HE' hit my web server but I never see HE send a get request.
Working Request from my own network: (FYI, another security zone via a juniper SRX -- from zone desktops to zone dmz --)
20:56:13.344491 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [S], seq 2017715871, win 8192, options [mss 1440,nop,wscale 2,nop,nop,sackOK], length 0
20:56:13.344519 IP6 ipv6.psitronic.net.www > 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202: Flags [S.], seq 669711399, ack 2017715872, win 5760, options [mss 1440,nop,nop,sackOK,nop,wscale 6], length 0
20:56:13.345873 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [.], ack 1, win 16560, length 0
20:56:13.345926 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [P.], seq 1:421, ack 1, win 16560, length 420
20:56:13.345957 IP6 ipv6.psitronic.net.www > 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202: Flags [.], ack 421, win 107, length 0
20:56:13.346894 IP6 ipv6.psitronic.net.www > 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202: Flags [P.], seq 1:212, ack 421, win 107, length 211
20:56:13.552939 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [.], ack 212, win 16507, length 0
20:56:15.423398 IP6 ipv6.psitronic.net.www > ipv6.he.net.36015: Flags [S.], seq 2019319429, ack 2016682775, win 5712, options [mss 1440,sackOK,TS val 9867790 ecr 316640389,[|tcp]>
20:56:28.353000 IP6 ipv6.psitronic.net.www > 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202: Flags [F.], seq 212, ack 421, win 107, length 0
20:56:28.353474 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [.], ack 213, win 16507, length 0
20:56:33.347928 IP6 2001:470:c244:0:8d7f:bec5:2eb5:7514.54202 > ipv6.psitronic.net.www: Flags [R.], seq 421, ack 213, win 0, length 0
HE's request: ( -- from zone vpn to zone dmz -- )
21:02:46.635195 IP6 ipv6.he.net.60909 > ipv6.psitronic.net.www: Flags [S], seq 3147558144, win 5760, options [mss 1440,sackOK,TS val 316743741 ecr 0,[|tcp]>
21:02:46.635240 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9965592 ecr 316743741,[|tcp]>
21:02:49.631856 IP6 ipv6.he.net.60909 > ipv6.psitronic.net.www: Flags [S], seq 3147558144, win 5760, options [mss 1440,sackOK,TS val 316744491 ecr 0,[|tcp]>
21:02:49.631882 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9966342 ecr 316743741,[|tcp]>
21:02:50.231394 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9966492 ecr 316743741,[|tcp]>
21:02:55.634406 IP6 ipv6.he.net.60909 > ipv6.psitronic.net.www: Flags [S], seq 3147558144, win 5760, options [mss 1440,sackOK,TS val 316745991 ecr 0,[|tcp]>
21:02:55.634426 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9967842 ecr 316743741,[|tcp]>
21:02:56.231394 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9967992 ecr 316743741,[|tcp]>
21:03:08.231405 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9970992 ecr 316743741,[|tcp]>
21:03:32.431405 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9977042 ecr 316743741,[|tcp]>
21:04:20.631406 IP6 ipv6.psitronic.net.www > ipv6.he.net.60909: Flags [S.], seq 3130302941, ack 3147558145, win 5712, options [mss 1440,sackOK,TS val 9989092 ecr 316743741,[|tcp]>
Any guidance will be greately appreciated, I only see 1 side of the traffic.
From my webserver, apache2, ubuntu server 10.04
tcpdump -i eth0 port 80
--Izz