IPv6 Tunnel DNS Lookups timeout

ace_ventura · Sep 23, 2013, 6:04 PM

I followed the guide to Using IPv6 on 2.1 with a Tunnel Broker at https://doc.pfsense.org/index.php/Using_IPv6_on_2.1_with_a_Tunnel_Broker I couldn't get it to work at first so i figured I needed to put the DNS server information I got from HE.net into the DNS servers field on the IPv6 DHCP server. I almost thought It wasnt working again until I restarted the browser then it appeared to work. I never did restart the browser the first time before thinking I needed to put DNS server info into the IPv6 DHCP server.

Now everything seems to work but my question is why is it when I do an nslookup for anything it comes back with DNS request timed out, timeout was 2 seconds. Server:unknown, address: is IPv6 DNS address from he.net followed by 4 more DNS request timed out messages. Before I setup the IPv6 tunnel and IPv6 DHCP server nslookups were good to go. Did I forget to do something?, or should I not have put IPv6 DNS information into the DNS servers on the IPv6 DHCP server since it never does tell you to do this in the guide above.

ace_ventura · Sep 27, 2013, 10:08 PM

Anyone?

Should this post go in this forum or DHCP and DNS?

ace_ventura · Oct 11, 2013, 8:52 PM

bump

johnpoz · Oct 11, 2013, 9:04 PM

can we see this command?

I use a he tunnel.. and on the tunnel broker page they list 2001:470:20::2 as ipv6 dns you can use.. So I set this on one of my clients as its ipv6 dns and nslookup works just fine.

C:>nslookup
Default Server: ordns.he.net
Address: 2001:470:20::2

ipv6.google.com
Server: ordns.he.net
Address: 2001:470:20::2

Non-authoritative answer:
Name: ipv6.l.google.com
Address: 2607:f8b0:4009:802::1013
Aliases: ipv6.google.com

Are you allow dns outbound on ipv6 for your clients in your pfsense firewall rules?

C:>ping ipv6.google.com

Pinging ipv6.l.google.com [2607:f8b0:4009:802::1011] with 32 bytes of data:
Reply from 2607:f8b0:4009:802::1011: time=43ms
Reply from 2607:f8b0:4009:802::1011: time=31ms
Reply from 2607:f8b0:4009:802::1011: time=30ms
Reply from 2607:f8b0:4009:802::1011: time=32ms

can you ping the he dns server?

C:>ping 2001:470:20::2

Pinging 2001:470:20::2 with 32 bytes of data:
Reply from 2001:470:20::2: time=34ms
Reply from 2001:470:20::2: time=30ms
Reply from 2001:470:20::2: time=31ms

ace_ventura · Oct 27, 2013, 4:18 PM

Sorry for the late reply, I just now noticed a notification for some reason.

Anyway here is the command i run

C:>nslookup google.com
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 2001:470:20::2

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out

I get a score of 9/10 on http://test-ipv6.com/ checking my network adapter it says internet for both ipv4 and ipv6, its getting the proper ipv6 DNS server however im not sure that the ipv6 default gateway is correct

here is the details of my test on test-ipv6.com
Test with IPv4 DNS record
ok (0.080s) using ipv4
Test with IPv6 DNS record
ok (0.104s) using ipv6
Test with Dual Stack DNS record
ok (0.100s) using ipv6
Test for Dual Stack DNS and large packet
ok (0.225s) using ipv6
Test IPv4 without DNS
ok (0.263s) using ipv4
Test IPv6 without DNS
ok (0.253s) using ipv6
Test IPv6 large packet
ok (0.231s) using ipv6
Test if your ISP's DNS server uses IPv6
timeout (10.247s)
Find IPv4 Service Provider
ok (0.211s) using ipv4 ASN 30036
Find IPv6 Service Provider
ok (0.132s) using ipv6 ASN 6939

Connection-specific DNS Suffix:
Description: Intel(R) 82579V Gigabit Network Connection
Physical Address:XX:XX:XX:XX:XX
DHCP Enabled: Yes
IPv4 Address: 10.0.0.51
IPv4 Subnet Mask: 255.255.255.0
Lease Obtained: Sunday, October 27, 2013 10:56:38 AM
Lease Expires: Sunday, October 27, 2013 1:09:45 PM
IPv4 Default Gateway: 10.0.0.1
IPv4 DHCP Server: 10.0.0.1
IPv4 DNS Server: 10.0.0.1
IPv4 WINS Server:
NetBIOS over Tcpip Enabled: Yes
IPv6 Address: 2001:470:XXXX:XX::ff38
Lease Obtained: Sunday, October 27, 2013 11:09:42 AM
Lease Expires: Sunday, October 27, 2013 1:09:43 PM
Link-local IPv6 Address: fe80::a0e1:b6bd:1eff:72e1%10
IPv6 Default Gateway: fe80::21c:c4ff:fe1c:2eeb%10
IPv6 DNS Server: 2001:470:20::2