Hurricane Electric's IPv6 Tunnel Broker Forums
June 19, 2013, 12:16:20 am *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Welcome to Hurricane Electric's Tunnelbroker.net forums!
 
   Home   Help Search Login Register  
Pages: [1]
  Print  
Author Topic: Problem: " Could not grab the file via IPv6 HTTP "  (Read 3143 times)
acma
Newbie
*
Posts: 10


View Profile
« on: November 24, 2010, 10:57:45 am »

Hi guys,

I've read a few topics about the same problem here but, despite the same message, I think my problem is different.

I've received from the certification page the link as http://ipv6.ces.eti.br/fxxd86upzt.txt. When I hit "Test It!", the page reports back "Could not grab the file via IPv6 HTTP". The problem is that I actually CAN grab the file both locally and remotely from another site.
Not only a do can grab the file, I'm also accessing this server remotely (both WWW and SSH) via IPv6 from another network (two others, actually).

I'm in control of my DNS records and the AAAA is resolving correctly (hence the web access thru IPv6).

Any ideas?

Thanks in advance!

Carlos Strauch
Logged

cholzhauer
Hero Member
*****
Posts: 2094


View Profile
« Reply #1 on: November 24, 2010, 11:36:48 am »

It works for me too, but HE doesn't know about it

Code:

[carl@mars]$ dig aaaa ipv6.ces.eti.br @2001:470:200::2

; <<>> DiG 9.6.2-P2 <<>> aaaa ipv6.ces.eti.br @2001:470:200::2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 31766
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ipv6.ces.eti.br.               IN      AAAA

;; Query time: 107 msec
;; SERVER: 2001:470:200::2#53(2001:470:200::2)
;; WHEN: Wed Nov 24 14:35:54 2010
;; MSG SIZE  rcvd: 33


How long ago did you enter the DNS information?  Might have to wait a day or so, or email ipv6@he.net to have them kick the server
Logged
acma
Newbie
*
Posts: 10


View Profile
« Reply #2 on: November 24, 2010, 11:55:21 am »

I entered the info yesterday.

But I think you mistyped the address (2001:470:200::2 instead of 2001:470:20::2). I've tried and that's the result:

Code:
root@Apolo:~# dig ipv6.ces.eti.br @2001:470:20::2 AAAA

; <<>> DiG 9.7.1-P2 <<>> ipv6.ces.eti.br @2001:470:20::2 AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50965
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.ces.eti.br.               IN      AAAA

;; ANSWER SECTION:
ipv6.ces.eti.br.        27534   IN      AAAA    2001:470:1f07:cd6:21d:92ff:febc:26c3

;; Query time: 172 msec
;; SERVER: 2001:470:20::2#53(2001:470:20::2)
;; WHEN: Wed Nov 24 16:49:04 2010
;; MSG SIZE  rcvd: 61

root@Apolo:~#

So the server at he.net should know about my server... Strange...  Undecided
Logged

cholzhauer
Hero Member
*****
Posts: 2094


View Profile
« Reply #3 on: November 24, 2010, 11:57:08 am »

nah, that's the address for ns2.he.net and the one I always use.

Code:
[carl@mars]$ host ns2.he.net
ns2.he.net has address 216.218.131.2
ns2.he.net has IPv6 address 2001:470:200::2
Logged
acma
Newbie
*
Posts: 10


View Profile
« Reply #4 on: November 24, 2010, 12:03:22 pm »

nah, that's the address for ns2.he.net and the one I always use.

Code:
[carl@mars]$ host ns2.he.net
ns2.he.net has address 216.218.131.2
ns2.he.net has IPv6 address 2001:470:200::2


Hmmm... Very strange...
One server has the info ("opcode: QUERY, status: NOERROR, id: 50965") and the other one doesn't ("opcode: QUERY, status: SERVFAIL, id: 31766") Huh
Logged

broquea
Senior Network Engineer, SEVEN Networks (AS19733)
Hero Member
*****
Posts: 1389



View Profile WWW
« Reply #5 on: November 24, 2010, 01:33:29 pm »

retest, flushed cache
Logged
acma
Newbie
*
Posts: 10


View Profile
« Reply #6 on: November 24, 2010, 01:57:40 pm »

Thanks, man. That seemed to do the trick.
Already passes that step. I only hope the next one works too.  Cheesy
Logged

ag33k
Newbie
*
Posts: 10


View Profile
« Reply #7 on: December 15, 2010, 09:47:33 am »

im having a similar problem.

Im not 100% sure I have set my IIS server up correctly but it appears to be working fine.

my domain name id d33n.ag33k.net it should hopefully resolve to 2001:470:1f08:113e::2

I'll run through my set up quickly.

Draytek 2710n in routed mode, my windows 7 machine has one of my 8 IPv4s and my FreeNAS (FreeSBD based) box has another.  I terminated one tunnel on my W7 and one on my NAS.

Opened up protocol 41 in the firewall and i can confirm i get an IPv6 Address as above.  I have tried both apache on the NAS and IIS on W7.

THanks
Logged

cholzhauer
Hero Member
*****
Posts: 2094


View Profile
« Reply #8 on: December 15, 2010, 10:07:54 am »

DNS does indeed work

Code:
[carl@mars ~]$ host d33n.ag33k.net
d33n.ag33k.net has IPv6 address 2001:470:1f08:113e::2

I can ping the address, but I am unable to connect via HTTP.

IIS should listen on IPv6 by default...did you allow HTTP connections to that host via IPv6 in your firewall?
Logged
ag33k
Newbie
*
Posts: 10


View Profile
« Reply #9 on: December 15, 2010, 10:20:30 am »

sorted, windows firewall after all.

Any tips on what to enable, i just turned it off for a few mins.  I have opened up ICMPv6 and Protocol 41 which it lists as IPV6 as well as http
Logged

cholzhauer
Hero Member
*****
Posts: 2094


View Profile
« Reply #10 on: December 15, 2010, 10:22:02 am »

If you want to keep getting the certs, you'll want to enable SMTP as well.
Logged
ewanm89
Newbie
*
Posts: 1


View Profile
« Reply #11 on: December 21, 2010, 06:07:53 am »

I'm having the same problem with http://ewanm89.co.uk/262sc8ss8a.txt, I can get it over ipv6 http myself, but the certification server can't seem to. Even though he.net nameservers are my SOA servers and AAAA record is set.
Logged
cholzhauer
Hero Member
*****
Posts: 2094


View Profile
« Reply #12 on: December 21, 2010, 06:14:04 am »

I think I can get to your file, but it looks like there's nothing in it to get?

I think you should place some text into the file..."262sc8ss8a.txt" would be a good start.

Other than that, DNS looks correct and HE knows about it

Code:

[carl@mars ~]$ dig aaaa ewanm89.co.uk @ns2.he.net

; <<>> DiG 9.6.2-P2 <<>> aaaa ewanm89.co.uk @ns2.he.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58294
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ewanm89.co.uk.                 IN      AAAA

;; ANSWER SECTION:
ewanm89.co.uk.          86400   IN      AAAA    2a01:7b8:2000:26::1

;; Query time: 112 msec
;; SERVER: 2001:470:200::2#53(2001:470:200::2)
;; WHEN: Tue Dec 21 09:14:08 2010
;; MSG SIZE  rcvd: 59

Oh, this is interesting

Code:

[carl@mars ~]$ wget http://ewanm89.co.uk/262sc8ss8a.txt
--2010-12-21 09:15:02--  http://ewanm89.co.uk/262sc8ss8a.txt
Resolving ewanm89.co.uk... 2a01:7b8:2000:26::1, 95.172.5.58
Connecting to ewanm89.co.uk|2a01:7b8:2000:26::1|:80... failed: Connection refused.
Connecting to ewanm89.co.uk|95.172.5.58|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 0 [text/plain]
Saving to: `262sc8ss8a.txt.1'

    [ <=>                                                                                                                                        ] 0           --.-K/s   in 0s

2010-12-21 09:15:03 (0.00 B/s) - `262sc8ss8a.txt.1' saved [0/0]

I can get your file over IPv4, but not IPv6
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!