jeffno
Newbie

Posts: 2
|
 |
« on: April 27, 2009, 10:15:25 am » |
|
I'm a bit frustrated at this test. All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver". What does that mean? I looked around on the web and there seem to be a number of different ways to set your server for IPv6. How is the client trying to access it? It would help if you offered more details on the exact process you are following. I can do some research myself, but I need specifics instead of guessing. Also, debugging output on failures would be helpful.
|
|
|
|
|
Logged
|
|
|
|
|
broquea
|
 |
« Reply #1 on: April 27, 2009, 11:31:22 am » |
|
I'm a bit frustrated at this test. All it says on failure is "Could not grab the file via IPv6 HTTP", and it says for prerequisites that you will need "An IPv6 capable website/webserver". What does that mean? I looked around on the web and there seem to be a number of different ways to set your server for IPv6. How is the client trying to access it? It would help if you offered more details on the exact process you are following. I can do some research myself, but I need specifics instead of guessing. Also, debugging output on failures would be helpful.
its doing: wget -6 on http://yourdomain.tld/code.txtIt doesn't get any easier to grab than that. So get your webserver/site *working on IPv6, and you won't fail the test. *"working on IPv6" means getting it some form of IPv6 connectivity (native or tunneled) and creating an AAAA record in DNS pointing the site to the IPv6 address you've assigned to it.
|
|
|
|
« Last Edit: April 27, 2009, 11:40:25 am by broquea »
|
Logged
|
|
|
|
jeffno
Newbie

Posts: 2
|
 |
« Reply #2 on: April 27, 2009, 02:56:15 pm » |
|
Thanks, your post was very helpful. I was able to get it working. I ended up using tunnelbroker for the server, which was easy and familiar after using it for the client in the previous step. This might be a good hint to add. Before it occurred to me, my head was spinning looking at all the docs and options on the net :-)
|
|
|
|
|
Logged
|
|
|
|
shubjero
Newbie

Posts: 3
|
 |
« Reply #3 on: May 21, 2009, 12:59:49 am » |
|
I'm having issues with this test as well. As far as I can tell, I'm doing everything right, but the HTTP test is failing. Test set up: Could not grab the file via IPv6 HTTP [Reset Test] Help Step Description Data [1] Generate a User Code txi34uc5iy [2] Tell us what your IPv6 website is; FQDN please http://ipv6.shubjero.com/dump / [3] We will test grabbing the file: http://ipv6.shubjero.com/dump/txi34uc5iy.txt [4] Schedule the test: Yet when I do a remote wget from a different IPv6 host, it works just fine. shubjero@egon:~$ wget -6 http://ipv6.shubjero.com/dump/txi34uc5iy.txt --04:03:18-- http://ipv6.shubjero.com/dump/txi34uc5iy.txt => `txi34uc5iy.txt.4' Resolving ipv6.shubjero.com... 2001:470:1c:f0::2 Connecting to ipv6.shubjero.com|2001:470:1c:f0::2|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 3 [text/plain]
100%[==================================================================================================================>] 3 --.--K/s
04:03:18 (51.40 KB/s) - `txi34uc5iy.txt.4' saved [3/3] Any help/suggestions would be greatly appreciated.
|
|
|
|
« Last Edit: May 21, 2009, 01:03:48 am by shubjero »
|
Logged
|
|
|
|
|
tykimus
|
 |
« Reply #4 on: May 21, 2009, 11:44:26 am » |
|
No AAAA record found for your domain name.
:~$ dig AAAA ipv6.shubjero.com
; <<>> DiG 9.5.0-P2 <<>> AAAA ipv6.shubjero.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48435 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION: ;ipv6.shubjero.com. IN AAAA
;; ANSWER SECTION: ipv6.shubjero.com. 85663 IN CNAME starbuck.shubjero.com.
;; AUTHORITY SECTION: shubjero.com. 2988 IN SOA ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600
;; Query time: 2 msec ;; SERVER: 74.82.42.42#53(74.82.42.42) ;; WHEN: Thu May 21 11:42:36 2009 ;; MSG SIZE rcvd: 120
:~$ dig AAAA starbuck.shubjero.com
; <<>> DiG 9.5.0-P2 <<>> AAAA starbuck.shubjero.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5372 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION: ;starbuck.shubjero.com. IN AAAA
;; AUTHORITY SECTION: shubjero.com. 2897 IN SOA ns1.shubnation.com. postmaster.shubjero.com. 2009011201 10800 3600 604800 3600
;; Query time: 9 msec ;; SERVER: 74.82.42.42#53(74.82.42.42) ;; WHEN: Thu May 21 11:44:07 2009 ;; MSG SIZE rcvd: 101
|
|
|
|
|
Logged
|
|
|
|
shubjero
Newbie

Posts: 3
|
 |
« Reply #5 on: May 21, 2009, 06:49:40 pm » |
|
Public resolvers seem to be resolving it just fine shubjero@egon:~$ dig ipv6.shubjero.com @4.2.2.1 AAAA
; <<>> DiG 9.3.2 <<>> ipv6.shubjero.com @4.2.2.1 AAAA ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55589 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;ipv6.shubjero.com. IN AAAA
;; ANSWER SECTION: ipv6.shubjero.com. 43200 IN AAAA 2001:470:1c:f0::2
;; Query time: 190 msec ;; SERVER: 4.2.2.1#53(4.2.2.1) ;; WHEN: Thu May 21 21:48:31 2009 ;; MSG SIZE rcvd: 63
|
|
|
|
|
Logged
|
|
|
|
|
broquea
|
 |
« Reply #6 on: May 21, 2009, 07:54:15 pm » |
|
reloaded caching server, works now. Was pretty sure i had a cron to automate this, but making sure there is one now.
|
|
|
|
|
Logged
|
|
|
|
shubjero
Newbie

Posts: 3
|
 |
« Reply #7 on: May 27, 2009, 06:54:42 am » |
|
Fantastic, thanks broquea. The test worked now. Hurray for enthusiast! 
|
|
|
|
|
Logged
|
|
|
|
arcticfire
Newbie

Posts: 14
|
 |
« Reply #8 on: July 19, 2009, 07:10:10 pm » |
|
I'm having this same problem. http://ipv6.home.core.arcticfire.netIt gives me the same error. I know that apache is accepting the IPv6 connection, because I can get to it from that computer. (using the domain or the IPv6 address) I don't think that DD-WRT is somehow firewalling the IPv6 traffic, but idk. EDIT: I'm not sure if this will shed any light on the subject, but the tunnel is terminated on the computer, not at the router.
|
|
|
|
« Last Edit: July 19, 2009, 07:17:18 pm by arcticfire »
|
Logged
|
|
|
|
|
kriteknetworks
|
 |
« Reply #9 on: July 20, 2009, 05:46:44 am » |
|
This URL fails to load for me.....
|
|
|
|
|
Logged
|
|
|
|
arcticfire
Newbie

Posts: 14
|
 |
« Reply #10 on: July 20, 2009, 11:14:31 am » |
|
Does it atleast resolve to the right address for you? It should resolve to:
2001:470:1F06:6C5::2
|
|
|
|
|
Logged
|
|
|
|
|
broquea
|
 |
« Reply #11 on: July 20, 2009, 11:17:14 am » |
|
telnet ipv6.home.core.arcticfire.net 80 Trying 2001:470:1f06:6c5::2...
just sits there trying to connect.
|
|
|
|
|
Logged
|
|
|
|
arcticfire
Newbie

Posts: 14
|
 |
« Reply #12 on: July 20, 2009, 11:23:22 am » |
|
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.
EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
|
|
|
|
« Last Edit: July 20, 2009, 12:35:08 pm by arcticfire »
|
Logged
|
|
|
|
|
broquea
|
 |
« Reply #13 on: July 21, 2009, 04:58:00 pm » |
|
Could my router (DD-WRT) be firewalling it? It's not terminating at the router, I'm passing protocol 41 through to a computer on my network and terminating it there. iptables and ip6tables on that computer both show no rules with a default policy of ACCEPT.
EDIT: I fired up wireshark and I found that when I run the test, no packets show up on that computer. So, my router must be blocking the incoming traffic. What would be a iptables (not ip6tables) rule that will allow all IPv6 traffic to go to it's destination?
Until someone familiar with iptables comments, have you tried not using/disabling/clearing/etc... on the ddwrt to test that it is an iptables configuration issue on the ddwrt?
|
|
|
|
|
Logged
|
|
|
|
tufinhas
Newbie

Posts: 29
|
 |
« Reply #14 on: July 21, 2009, 07:06:33 pm » |
|
http://www.dd-wrt.com/wiki/index.php/IPv6iptables -t nat -D POSTROUTING -o vlan1 -j MASQUERADE iptables -t nat -I POSTROUTING -p ! ipv6 -o vlan1 -j MASQUERADE
if don't work. use a "keepalive" ping6 -i 40 Tunnel_Server_IPv6_address
|
|
|
|
« Last Edit: July 21, 2009, 07:13:36 pm by dragoon »
|
Logged
|
|
|
|
|