Hurricane Electric's IPv6 Tunnel Broker Forums
May 23, 2013, 01:03:02 pm *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Welcome to Hurricane Electric's Tunnelbroker.net forums!
 
   Home   Help Search Login Register  
Pages: [1] 2
  Print  
Author Topic: Enthusiast: Could not grab the file via IPv6 HTTP  (Read 8776 times)
jeffno
Newbie
*
Posts: 2


View Profile
« on: April 27, 2009, 10:15:25 am »

I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.
Logged
broquea
Senior Network Engineer, SEVEN Networks (AS19733)
Hero Member
*****
Posts: 1377



View Profile WWW
« Reply #1 on: April 27, 2009, 11:31:22 am »

I'm a bit frustrated at this test.  All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver".  What does that mean?  I looked around on the web and there seem to be a number of different ways to set your server for IPv6.  How is the client trying to access it?  It would help if you offered more details on the exact process you are following.  I can do some research myself, but I need specifics instead of guessing.  Also, debugging output on failures would be helpful.

its doing: wget -6 on http://yourdomain.tld/code.txt

It doesn't get any easier to grab than that. So get your webserver/site *working on IPv6, and you won't fail the test.

*"working on IPv6" means getting it some form of IPv6 connectivity (native or tunneled) and creating an AAAA record in DNS pointing the site to the IPv6 address you've assigned to it.
« Last Edit: April 27, 2009, 11:40:25 am by broquea » Logged
jeffno
Newbie
*
Posts: 2


View Profile
« Reply #2 on: April 27, 2009, 02:56:15 pm »


its doing: wget -6 on http://yourdomain.tld/code.txt
[...]

Thanks, your post was very helpful.  I was able to get it working.  I ended up using tunnelbroker for the server, which was easy and familiar after using it for the client in the previous step.  This might be a good hint to add.  Before it occurred to me, my head was spinning looking at all the docs and options on the net :-)
Logged
shubjero
Newbie
*
Posts: 3


View Profile
« Reply #3 on: May 21, 2009, 12:59:49 am »

I'm having issues with this test as well.

As far as I can tell, I'm doing everything right, but the HTTP test is failing.

Test set up:

Could not grab the file via IPv6 HTTP

[Reset Test]

Help   Step   Description   Data
   [1]   Generate a User Code    txi34uc5iy
   [2]   Tell us what your IPv6 website is; FQDN please    http://ipv6.shubjero.com/dump /
   [3]   We will test grabbing the file:    http://ipv6.shubjero.com/dump/txi34uc5iy.txt
   [4]   Schedule the test:

Yet when I do a remote wget from a different IPv6 host, it works just fine.

Code:
shubjero@egon:~$ wget -6 http://ipv6.shubjero.com/dump/txi34uc5iy.txt 
--04:03:18--  http://ipv6.shubjero.com/dump/txi34uc5iy.txt
           => `txi34uc5iy.txt.4'
Resolving ipv6.shubjero.com... 2001:470:1c:f0::2
Connecting to ipv6.shubjero.com|2001:470:1c:f0::2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/plain]

100%[==================================================================================================================>] 3             --.--K/s             

04:03:18 (51.40 KB/s) - `txi34uc5iy.txt.4' saved [3/3]

Any help/suggestions would be greatly appreciated.
« Last Edit: May 21, 2009, 01:03:48 am by shubjero » Logged
tykimus
Administrator
Newbie
*****
Posts: 10


View Profile
« Reply #4 on: May 21, 2009, 11:44:26 am »

No AAAA record found for your domain name.

:~$ dig AAAA ipv6.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA ipv6.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48435
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.      IN   AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.   85663   IN   CNAME   starbuck.shubjero.com.

;; AUTHORITY SECTION:
shubjero.com.      2988   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 2 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:42:36 2009
;; MSG SIZE  rcvd: 120

:~$ dig AAAA starbuck.shubjero.com

; <<>> DiG 9.5.0-P2 <<>> AAAA starbuck.shubjero.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;starbuck.shubjero.com.      IN   AAAA

;; AUTHORITY SECTION:
shubjero.com.      2897   IN   SOA   ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600

;; Query time: 9 msec
;; SERVER: 74.82.42.42#53(74.82.42.42)
;; WHEN: Thu May 21 11:44:07 2009
;; MSG SIZE  rcvd: 101

Logged
shubjero
Newbie
*
Posts: 3


View Profile
« Reply #5 on: May 21, 2009, 06:49:40 pm »

Public resolvers seem to be resolving it just fine

Code:
shubjero@egon:~$ dig ipv6.shubjero.com @4.2.2.1 AAAA

; <<>> DiG 9.3.2 <<>> ipv6.shubjero.com @4.2.2.1 AAAA
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55589
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.shubjero.com.             IN      AAAA

;; ANSWER SECTION:
ipv6.shubjero.com.      43200   IN      AAAA    2001:470:1c:f0::2

;; Query time: 190 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Thu May 21 21:48:31 2009
;; MSG SIZE  rcvd: 63
Logged
broquea
Senior Network Engineer, SEVEN Networks (AS19733)
Hero Member
*****
Posts: 1377



View Profile WWW
« Reply #6 on: May 21, 2009, 07:54:15 pm »

reloaded caching server, works now. Was pretty sure i had a cron to automate this, but making sure there is one now.
Logged
shubjero
Newbie
*
Posts: 3


View Profile
« Reply #7 on: May 27, 2009, 06:54:42 am »

Fantastic, thanks broquea.

The test worked now.

Hurray for enthusiast! Smiley
Logged
arcticfire
Newbie
*
Posts: 14


View Profile
« Reply #8 on: July 19, 2009, 07:10:10 pm »

I'm having this same problem.

http://ipv6.home.core.arcticfire.net

It gives me the same error. I know that apache is accepting the IPv6 connection, because I can get to it from that computer. (using the domain or the IPv6 address) I don't think that DD-WRT is somehow firewalling the IPv6 traffic, but idk.

EDIT: I'm not sure if this will shed any light on the subject, but the tunnel is terminated on the computer, not at the router.
« Last Edit: July 19, 2009, 07:17:18 pm by arcticfire » Logged
kriteknetworks
Full Member
***
Posts: 215


View Profile WWW
« Reply #9 on: July 20, 2009, 05:46:44 am »


This URL fails to load for me.....
Logged
arcticfire
Newbie
*
Posts: 14


View Profile
« Reply #10 on: July 20, 2009, 11:14:31 am »

Does it atleast resolve to the right address for you? It should resolve to:

2001:470:1F06:6C5::2
Logged
broquea
Senior Network Engineer, SEVEN Networks (AS19733)
Hero Member
*****
Posts: 1377



View Profile WWW
« Reply #11 on: July 20, 2009, 11:17:14 am »

Code:
telnet ipv6.home.core.arcticfire.net 80
Trying 2001:470:1f06:6c5::2...

just sits there trying to connect.
Logged
arcticfire
Newbie
*
Posts: 14


View Profile
« Reply #12 on: July 20, 2009, 11:23:22 am »

Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
« Last Edit: July 20, 2009, 12:35:08 pm by arcticfire » Logged
broquea
Senior Network Engineer, SEVEN Networks (AS19733)
Hero Member
*****
Posts: 1377



View Profile WWW
« Reply #13 on: July 21, 2009, 04:58:00 pm »

Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.

EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?

Until someone familiar with iptables comments, have you tried not using/disabling/clearing/etc... on the ddwrt to test that it is an iptables configuration issue on the ddwrt?
Logged
tufinhas
Newbie
*
Posts: 29


View Profile
« Reply #14 on: July 21, 2009, 07:06:33 pm »

http://www.dd-wrt.com/wiki/index.php/IPv6

Code:
iptables -t nat -D POSTROUTING -o vlan1 -j MASQUERADE
iptables -t nat -I POSTROUTING -p ! ipv6 -o vlan1 -j MASQUERADE

if don't work. use a "keepalive"

ping6 -i 40 Tunnel_Server_IPv6_address
« Last Edit: July 21, 2009, 07:13:36 pm by dragoon » Logged
Pages: [1] 2
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!