Hurricane Electric's IPv6 Tunnel Broker Forums
May 22, 2013, 11:00:22 pm *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Welcome to Hurricane Electric's Tunnelbroker.net forums!
 
  Home Help Search Login Register  
  Show Posts
Pages: [1] 2 3 ... 39
1  General IPv6 Topics / IPv6 on Linux & BSD & Mac / Re: setup L2TP tunnel with IPv6 inside a KVM VM? on: May 14, 2013, 09:39:33 am
Obviously, if host B can access IPv6 addresses without problems, host A is NOT the problem.

Could it be that with host B, your lack of use of iptables, thus no NAT, is the problem?  172.16.0.0/12 is not a globally routable network.
2  General IPv6 Topics / IPv6 Basics & Questions & General Chatter / Re: Facebook no longer resolves to AAAA address on: May 10, 2013, 10:35:43 am
On the domain name label itself, they should be using a SRV-RR, not an address-type record.  Unfortunately for HTTP, most clients are ignorant of SRV records.
3  IPv6 Certification Program Topics / General Discussion / Re: Admin test: MTA should not require MX when AAAA is the same. on: May 08, 2013, 11:21:32 am
Quote
You'll find that many DNS providers do not support SRV records, but they do support MX records pointing to the domain itself. This may be the case for the majority of DNS providers.
Not my problem.  My colocation provider hosts all my domains as secondary name servers (and I run the primary on my box), thus I have every type of RR available to me.
4  IPv6 Certification Program Topics / General Discussion / Re: Admin test: MTA should not require MX when AAAA is the same. on: April 30, 2013, 11:01:05 am
That's not what he said, at least how I read it.

I interpreted him as saying that with:

example.com.  IN  MX   0  example.com.
example.com.  IN  A     192.0.2.1
example.com.  IN  AAAA 2001:DB8::1

the MX record will not be accepted by his DNS provider because it points to its own label (which with the A-RR and/or the AAAA-RR is a host name as well as a domain and zone name).

Technically, his provider is correct.  Labels which have the SOA-RR (zone names) should not be host names.  Host names should be established UNDER zone names.  (Domain names are the registerable zone names.)


If one wants to enable just the domain name as a "host name" valid for HTTP lookups (e.g. to "drop" a leading "www"), the correct way to do that is with a SRV-RR.  I have found that some clients (browsers and robots) will use the SRV record to find the HTTP server (but this is still very rare).  I know this because I do NOT provide address records for my domain names but do have SRV records at the domain name label and programmed my HTTP server to perform redirection should just the domain name be the queried (virtual) host name, and I see such requests (maybe one per day) in my server's request log.

As to whether a domain or host name should always have an MX-RR, granted it is not an absolute requirement but it does provide for better performance.  Without it, the negative MX-RR answer will be cached for what is usually a much shorter time than a positive answer, so many more uncached lookups will occur.  Standard values of 3 hours for negative answers and 1 day for positive answers means that queries for the absent record at a busy destination will cause up to 8 times the DNS traffic as compared to the positive answer frequency.  As a domain name should not have an address-type record because it should not be also a host name, it should then have an MX-RRset (and probably an SRV-RRset too) for its mail service.  Postfix can use the SRV records.  Sendmail will not.

Aside, regarding SRV records:  Many people skip SRV records for DNS itself.  Granted, how can one use the DNS to find the name servers if one doesn't already have the SRV-RRs in hand?  For the DNS service, the SRV records do not indicate a query path as they do for other services, but only the update path; i.e. the SRV-RRs for the domain service should point at only the primary server (or other DNS server) where zone updates are performed.  NS-RRs continue to indicate where queries are directed.

Don't forget:

label.example.com.  IN  MX  0  .

means that there is no mail service at that label (usually a host name for a machine hosting a dedicated service).  That is not the same as:

label.example.com.  IN  MX  0  localhost.
localhost.                IN  A   127.0.0.1
localhost.                IN  AAAA  ::1

where a host does have mail service but only accepts mail from itself.
5  Tunnelbroker.net Specific Topics / Questions & Answers / Re: Badauth on tunnel validation? on: April 29, 2013, 10:27:59 am
I agree with the quotes being necessary.  You forget that "&" is a unix shell metacharacter.
6  General IPv6 Topics / IPv6 on Routing Platforms / Re: BGP Tunnel on: April 19, 2013, 04:04:18 pm
Noted, but maybe the individual tunnel sponsors they contract with may.  It never hurts to ask.
7  General IPv6 Topics / IPv6 on Routing Platforms / Re: BGP Tunnel on: April 18, 2013, 07:34:04 pm
Try Sixxs.net.
8  General IPv6 Topics / IPv6 on Routing Platforms / Re: Setup IPv6 in IPv4 tunnel on DLink DIR-615 on: March 29, 2013, 10:52:48 am
Your local IPv4 address isn't your assigned globally reachable IPv4 address.
9  General IPv6 Topics / IPv6 on Routing Platforms / Re: Setup IPv6 in IPv4 tunnel on DLink DIR-615 on: March 28, 2013, 11:54:44 am
Your local IPv4 address for the tunnel should be your public IPv4 address.
10  General IPv6 Topics / IPv6 on Routing Platforms / Re: Setup IPv6 in IPv4 tunnel on DLink DIR-615 on: March 25, 2013, 10:42:26 am
Quote
After changing the Local IPv4 Address to 192.168.0.1, I can ping....
Is your router behind another NAT device?  If so, that's the problem.
11  General IPv6 Topics / IPv6 on Routing Platforms / Re: Setup IPv6 in IPv4 tunnel on DLink DIR-615 on: March 24, 2013, 12:09:49 pm
The only thing I noted that was different about your setup vs. mine with my DIR-615 is your LAN IPv6 address is set to the "::1" of your subnet, while I let my float to the natural MAC-generated address.

Try setting it to 2001:470:19:1292:BAA3:86FF:FE4A:043E and see if that makes a difference.
12  General IPv6 Topics / IPv6 Basics & Questions & General Chatter / Re: Traffic from an unregistered address pool? on: March 13, 2013, 10:39:06 am
The information is available via a "whois" lookup - and indicates France, not Russia.
13  General IPv6 Topics / IPv6 Basics & Questions & General Chatter / Re: waste of bandwith? on: March 12, 2013, 11:34:37 am
You listed it among the other subtractions.  That was clear.  Your computation implied comparing 1280 to 1208, not 1300 to 1208.
14  General IPv6 Topics / IPv6 Basics & Questions & General Chatter / Re: waste of bandwith? on: March 11, 2013, 11:15:17 am
You explicitly included it in your list of subtracted values from 1280 to arrive at 1208.  Read your message.
15  General IPv6 Topics / IPv6 Basics & Questions & General Chatter / Re: waste of bandwith? on: March 10, 2013, 12:56:46 pm
Yes, but you subtracted the IPv4 header size from the IPv6 MTU when you should have added it as it's NOT part of the IPv6 MTU size.
Pages: [1] 2 3 ... 39
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!