Netgate Forum IPv6 Access Unsuccessful

[patient0]

Hi,

The pfSense CE 2.7.2 router is configured with IPv4 and IPv6 and I set up NAT64 (jool on a seperate VM) and DNS64 (on pfSense). All that runs ok for some months.

On my Macbook I have different 'Location' configurations, one IPv4 only, one IPv6 only and one with both IPv4 and IPv6 enabled.

If I set it to IPv6 only I can't access https://forum.netgate.com. Checking the firewall logs I see only a TCP:S entry

[2001:...:9c69:9ba6]:52702 [2610:160:11:11::5]:443 TCP:S

Trying 'wget -6qO - https://forum.netgate.com' on a Hetzner cloud VM and a Hetzner dedicated server time out.

I don't run into problems with other website, if they don't have an IPv6 address NAT64 is used. That works pretty well.

TL;DR: Is the forum IPv6 enable and working for others? And if yes any hints for what to check? Searching the forum I found one very old thread which mentioned MTU size.

[Bob.Dig]

@patient0 For me it is also not working in IPv6 only mode. But I don't think they said it should?

[patient0]

@Bob-Dig thanks for checking it out.

But I don't think they said it should?

That is true, but then they didn't say it shouldn't ... and it got an IPv6 address.

[Gertjan]

@patient0

IPv6 forum (forum.netgate.com) access was working for years. That is, it was working for me, accessing the forum from France.
A month or two ago, that changed.

root@ns311465:~# dig forum.netgate.com AAAA +short
2610:160:11:11::5

A IPv6 is avaible.
Connecting to is another thing.

[stephenw10]

Hmm, I would have expected it to. let me see.....

Yup seeing that here too. Checking...

[Gertjan]

@stephenw10

login-to-view

is back

What was it ?

[patient0]

And it works for me too (Switzerland & Germany)

[stephenw10]

Yup, should be good now.

[johnpoz]

@stephenw10 ok who wants to bet that the next spam that gets through is from IPv6 address ;)

[stephenw10]

[johnpoz]

@stephenw10 what did I tell you ;)

https://forum.netgate.com/user/marie11

Spammer - IPv6 ;)

[Gertjan]

@johnpoz

Just one ?

[johnpoz]

@Gertjan so far that have been reported.. More to come I am sure..

[Gertjan]

@johnpoz

To really get the number of spammers down right now : disable IP4 for the forum ? ;)

[johnpoz]

@Gertjan hahaha - yeah that could work too hehehe

[stephenw10]

Hmm

[Bob.Dig]

Let's try it for a week. But then, the forum will become quiet boring.

[Gertjan]

@Bob-Dig

Would the forum become inaccessible for half of all potential visitors ? less ? more ?
I presume most ISPs have some IPv6 capabilities these days **. Europe, the states, probably China, everywhere where pfSense can be used is a place where IPv6 should work by now.

Of all people, pfSense admins should be the ones being able to make IPv6 work.

** I'm trying to be positif about IPv6 today.

[stephenw10]

Well given it was broken and 3 people noticed....

[johnpoz]

@stephenw10 said in Netgate Forum IPv6 Access Unsuccessful:

and 3 people noticed....

and the 2nd two were prob ones that just checked after the 1st posted it ;)