[all]

When I use /usr/bin/system-config-firewall-tui to configure my firewall, it seems to only apply to ipv4

If I start /etc/init.d/ip6tables all IPv6 traffic ports are filtered. Of course when I don't start that service, none is.
Is that tool just simply broken for IPv6?

I'm using CentOS 5.x, but it's probably the same. The ip6tables startup script looks for firewall rules in /etc/sysconfig/ip6tables
What's in that file? What firewall rules do you end up with after startup (ip6tables -L)?

[routed]

interface eth1 {
        address-pool-pool1 3600;
};

pool pool1 {
   range 2001:470:35:270::1000 to 2001:470:35:270::2000;
};

That's certainly wrong (address-pool-pool1 probably should be address-pool pool1), and not at all consistent with the examples.

What your dhcpd6.conf file should look like is something like

subnet6 2001:470:35:270::/64 {
        range6 2001:470:35:270::1000 2001:470:35:270::2000;
        option dhcp6.name-servers 2001:470:35:270::1;
        option dhcp6.domain-search "ipv6.pusdatin.com";
}

No guarantees, but this should work.
However, please verify that 2001:470:35:270::/64 is your routed IPv6 (i.e. not the same network that hosts the tunnel between you and HE.)
It seems to me that you're using 2001:470:35:270:: addresses on your tunnel. You shouldn't be using DHCP for the tunnel network, use it on your routed network.

Hmm, I also tried NMAP on XP, not recognized there either.

Leaves the question why XP did not fall back to IPv4 when it did not get an answer using IPv6, while 7 did try IPv4.

nmap isn't part of windows. You can find instructions for installing it on windows from here.

As to why XP didn't fall back - I'd guess that that's an old enough OS that the idea of running dual-stack wasn't well implemented.

I'm running a tunnel at home (OpenBSD firewall in front of my FiOS router) and now at a VPS system. I'm doing this to learn IPv6 administration and for grins.

Yesterday I enabled an IPv6 address for the MX's for my domains; it took only a couple of hours before I got my first real V6-transported email. Good stuff.
No spam yet, fortunately.

I think you dont know how to find whois.... Otherwise its not possible that you are failing .... its such an easy task to perform.. how are you failing what is wrong ? be specific

Thanks for the gratuitous insult. Yes, I know how to find whois.  If you had bothered to actually read what I posted rather than just trying to be a stupid jerk, you would have noticed two whois output pages. D'oh.

Yes, it's possible that it's failing.  The test is broken and DOES NOT WORK for entities in the ARIN region due to changes that ARIN made in their WHOIS output.

How I'm failing and what's wrong is detailed above.

Please don't bother to reply unless you have constructive suggestions.

HE, any chance you can get this test working again?  It's getting to be a pain to find whois entries outside the ARIN region (and outside 2a01:238, who seems to be putting up dozens of sites per day..)

What input are you giving the test?  Can you provide one thing you submitted that doesn't work?

Anything in the ARIN region fails. For example, let's take devcentral.f5.com, or 2001:19b8:101:2::f5f5:5
a simple WHOIS query (whois 2001:19b8:101:2::f5f5:5 @whois.arin.net) gives:

[Querying whois.arin.net]
[whois.arin.net]
#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 2001:19b8:101:2::f5f5:5"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=2001:19b8:101:2::f5f5:5?showDetails=true&showARIN=true
#

American Registry for Internet Numbers ARIN-002 (NET6-2001-1800-0) 2001:1800:: - 2001:19FF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
Tierpoint, LLC TIER6-3 (NET6-2001-19B8-1) 2001:19B8:: - 2001:19B8:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

So, you can query the network using the handle:

whois "n ! NET6-2001-19B8-1" @whois.arin.net
which gives

[whois.arin.net]
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;handle=NET6-2001-19B8-1?showDetails=true&showARIN=true
#

NetRange:       2001:19B8:: - 2001:19B8:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
CIDR:           2001:19B8::/32
OriginAS:       AS30340
NetName:        TIER6-3
NetHandle:      NET6-2001-19B8-1
Parent:         NET6-2001-1800-0
NetType:        Direct Allocation
RegDate:        2004-08-12
Updated:        2007-10-25
Ref:            http://whois.arin.net/rest/net/NET6-2001-19B8-1

OrgName:        Tierpoint, LLC
OrgId:          TIERP
Address:        23403 E Mission Ave
City:           Liberty Lake
StateProv:      WA
PostalCode:     99019
Country:        US
RegDate:        2007-10-18
Updated:        2011-04-05
Ref:            http://whois.arin.net/rest/org/TIERP

OrgTechHandle: DSE61-ARIN
OrgTechName:   SELIGER, DAN
OrgTechPhone:  +1-509-688-2575
OrgTechEmail:  dan.seliger@tierpoint.com
OrgTechRef:    http://whois.arin.net/rest/poc/DSE61-ARIN

OrgTechHandle: TNO36-ARIN
OrgTechName:   Tierpoint Network Operations
OrgTechPhone:  +1-509-688-2590
OrgTechEmail:  noc@tierpoint.com
OrgTechRef:    http://whois.arin.net/rest/poc/TNO36-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Neither of these WHOIS results work with the HE test. I've just been using other regions.