Netgate Forum IPv6 Access Unsuccessful

patient0

Hi,

The pfSense CE 2.7.2 router is configured with IPv4 and IPv6 and I set up NAT64 (jool on a seperate VM) and DNS64 (on pfSense). All that runs ok for some months.

On my Macbook I have different 'Location' configurations, one IPv4 only, one IPv6 only and one with both IPv4 and IPv6 enabled.

If I set it to IPv6 only I can't access https://forum.netgate.com. Checking the firewall logs I see only a TCP:S entry

[2001:...:9c69:9ba6]:52702 [2610:160:11:11::5]:443 TCP:S

Trying 'wget -6qO - https://forum.netgate.com' on a Hetzner cloud VM and a Hetzner dedicated server time out.

I don't run into problems with other website, if they don't have an IPv6 address NAT64 is used. That works pretty well.

TL;DR: Is the forum IPv6 enable and working for others? And if yes any hints for what to check? Searching the forum I found one very old thread which mentioned MTU size.

Bob.Dig

@patient0 For me it is also not working in IPv6 only mode. But I don't think they said it should?

patient0

@Bob-Dig thanks for checking it out.

But I don't think they said it should?

That is true, but then they didn't say it shouldn't ... and it got an IPv6 address.

Gertjan

@patient0

IPv6 forum (forum.netgate.com) access was working for years. That is, it was working for me, accessing the forum from France.
A month or two ago, that changed.

root@ns311465:~# dig forum.netgate.com AAAA +short
2610:160:11:11::5

A IPv6 is avaible.
Connecting to is another thing.

stephenw10

Hmm, I would have expected it to. let me see.....

Yup seeing that here too. Checking...

Gertjan

@stephenw10

is back

What was it ?

patient0

And it works for me too (Switzerland & Germany)

stephenw10

Yup, should be good now.

johnpoz

@stephenw10 ok who wants to bet that the next spam that gets through is from IPv6 address ;)

stephenw10

johnpoz

@stephenw10 what did I tell you ;)

https://forum.netgate.com/user/marie11

Spammer - IPv6 ;)

Gertjan

@johnpoz

Just one ?

johnpoz

@Gertjan so far that have been reported.. More to come I am sure..

Gertjan

@johnpoz

To really get the number of spammers down right now : disable IP4 for the forum ? ;)

johnpoz

@Gertjan hahaha - yeah that could work too hehehe

stephenw10

Hmm

Bob.Dig

Let's try it for a week. But then, the forum will become quiet boring.

Gertjan

@Bob-Dig

Would the forum become inaccessible for half of all potential visitors ? less ? more ?
I presume most ISPs have some IPv6 capabilities these days **. Europe, the states, probably China, everywhere where pfSense can be used is a place where IPv6 should work by now.

Of all people, pfSense admins should be the ones being able to make IPv6 work.

** I'm trying to be positif about IPv6 today.

stephenw10

Well given it was broken and 3 people noticed....

johnpoz

@stephenw10 said in Netgate Forum IPv6 Access Unsuccessful:

and 3 people noticed....

and the 2nd two were prob ones that just checked after the 1st posted it ;)