Enthusiast: Could not grab the file via IPv6 HTTP

[jeffno]

I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.

[broquea]

I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.

its doing: wget -6 on http://yourdomain.tld/code.txt

It doesn't get any easier to grab than that. So get your webserver/site *working on IPv6, and you won't fail the test.

*"working on IPv6" means getting it some form of IPv6 connectivity (native or tunneled) and creating an AAAA record in DNS pointing the site to the IPv6 address you've assigned to it.

[jeffno]

its doing: wget -6 on http://yourdomain.tld/code.txt
[...]

Thanks, your post was very helpful.  I was able to get it working.  I ended up using tunnelbroker for the server, which was easy and familiar after using it for the client in the previous step.  This might be a good hint to add.  Before it occurred to me, my head was spinning looking at all the docs and options on the net :-)

[shubjero]

I'm having issues with this test as well.

As far as I can tell, I'm doing everything right, but the HTTP test is failing.

Test set up:

Could not grab the file via IPv6 HTTP

[Reset Test]

Help   Step   Description   Data
   [1]   Generate a User Code    txi34uc5iy
   [2]   Tell us what your IPv6 website is; FQDN please    http://ipv6.shubjero.com/dump /
   [3]   We will test grabbing the file:    http://ipv6.shubjero.com/dump/txi34uc5iy.txt
   [4]   Schedule the test:

Yet when I do a remote wget from a different IPv6 host, it works just fine.

Code Select Expand

shubjero@egon:~$ wget -6 http://ipv6.shubjero.com/dump/txi34uc5iy.txt 
--04:03:18--  http://ipv6.shubjero.com/dump/txi34uc5iy.txt
           => `txi34uc5iy.txt.4'
Resolving ipv6.shubjero.com... 2001:470:1c:f0::2
Connecting to ipv6.shubjero.com|2001:470:1c:f0::2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/plain]

100%[==================================================================================================================>] 3             --.--K/s             

04:03:18 (51.40 KB/s) - `txi34uc5iy.txt.4' saved [3/3]

Any help/suggestions would be greatly appreciated.

[tykimus]

No AAAA record found for your domain name.

:~$ dig AAAA ipv6.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA ipv6.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48435
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.      IN   AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.   85663   IN   CNAME   starbuck.shubjero.com.

;; AUTHORITY SECTION:
shubjero.com.      2988   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 2 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:42:36 2009
;; MSG SIZE  rcvd: 120

:~$ dig AAAA starbuck.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA starbuck.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;starbuck.shubjero.com.      IN   AAAA

;; AUTHORITY SECTION:
shubjero.com.      2897   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 9 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:44:07 2009
;; MSG SIZE  rcvd: 101

[shubjero]

Public resolvers seem to be resolving it just fine

Code Select Expand

shubjero@egon:~$ dig ipv6.shubjero.com @4.2.2.1 AAAA

; <<>> DiG 9.3.2 <<>> ipv6.shubjero.com @4.2.2.1 AAAA
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55589
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.             IN      AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.      43200   IN      AAAA    2001:470:1c:f0::2

;; Query time: 190 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Thu May 21 21:48:31 2009
;; MSG SIZE  rcvd: 63

[broquea]

reloaded caching server, works now. Was pretty sure i had a cron to automate this, but making sure there is one now.

[shubjero]

Fantastic, thanks broquea.

The test worked now.

Hurray for enthusiast! :)

[arcticfire]

I'm having this same problem.

http://ipv6.home.core.arcticfire.net

It gives me the same error. I know that apache is accepting the IPv6 connection, because I can get to it from that computer. (using the domain or the IPv6 address) I don't think that DD-WRT is somehow firewalling the IPv6 traffic, but idk.

EDIT: I'm not sure if this will shed any light on the subject, but the tunnel is terminated on the computer, not at the router.

[kriteknetworks]

http://ipv6.home.core.arcticfire.net

This URL fails to load for me.....

[arcticfire]

Does it atleast resolve to the right address for you? It should resolve to:

2001:470:1F06:6C5::2

[broquea]

Code Select Expand

telnet ipv6.home.core.arcticfire.net 80
Trying 2001:470:1f06:6c5::2...


just sits there trying to connect.

[arcticfire]

Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?

[broquea]

Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?

Until someone familiar with iptables comments, have you tried not using/disabling/clearing/etc... on the ddwrt to test that it is an iptables configuration issue on the ddwrt?

[tufinhas]

http://www.dd-wrt.com/wiki/index.php/IPv6

Code Select Expand

iptables -t nat -D POSTROUTING -o vlan1 -j MASQUERADE
iptables -t nat -I POSTROUTING -p ! ipv6 -o vlan1 -j MASQUERADE


if don't work. use a "keepalive"

ping6 -i 40 Tunnel_Server_IPv6_address