Hide IPv4 WAN address while using Hurricane Electric IPv6 tunnel

johnpoz

^ not sure he did.. Can tell you for sure if I disable ipv4 on my box, and point to HE ipv6 for dns to just take my unbound cache and ipv4 connectivity out of the question for dns, etc.

I can not get to that site.. I only show test-ipv6.com with IPv4 records.. Be it you query from ipv4 or ipv6 dns..

I disable ipv4 on my machine and only use IPv6 I can not get to that site..

JKnott

^^^^
That's what I'd expect too. Something just doesn't add up here.

johnpoz

That site as I showed you will show you don't have ipv4 if you just block access to those 2 ipv4 IPs.. You can see exactly how the site tests for ipv4.. Which is kind of lame if it only listens on ipv4 kind of obvious that you must of accessed it via ipv4 ;)

So I tested again.. And even when you query only from ipv6 I can not find an IPv6 address for that site.. So loading it must of come up via ipv4..

So while I show NS having ipv6 for that domain

;; QUESTION SECTION:
;test-ipv6.com. IN NS

;; ANSWER SECTION:
test-ipv6.com. 300 IN NS ns1.test-ipv6.com.
test-ipv6.com. 300 IN NS ns2.test-ipv6.com.

;; ADDITIONAL SECTION:
ns1.test-ipv6.com. 300 IN A 216.218.228.118
ns1.test-ipv6.com. 300 IN AAAA 2001:470:1:18::118
ns2.test-ipv6.com. 300 IN A 209.128.193.197
ns2.test-ipv6.com. 300 IN AAAA 2607:f0db:5001:8000::2

If you query the IPv6 NS address you don't get a AAAA response for test-ipv6.com or www.test-ipv6.com

JKnott

I just tried connecting to ns2.test-ipv6.com. I get an unable to connect error.

johnpoz

Not having any problems connecting to them.. But they don't have any AAAA records..

dig @2607:f0db:5001:8000::2 test-ipv6.com AAAA

; <<>> DiG 9.10.4-P3 <<>> @2607:f0db:5001:8000::2 test-ipv6.com AAAA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57326
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;test-ipv6.com. IN AAAA

;; AUTHORITY SECTION:
test-ipv6.com. 300 IN SOA ns1.test-ipv6.com. jfesler.test-ipv6.com. 2016030401 10800 3600 604800 86400

;; Query time: 64 msec
;; SERVER: 2607:f0db:5001:8000::2#53(2607:f0db:5001:8000::2)
;; WHEN: Sun Oct 16 09:51:34 Central Daylight Time 2016
;; MSG SIZE rcvd: 79