On Wed, 28 Sep 2011 21:12:03 +0300, Damyan Ivanov wrote:

> > 2011/09/28-18:17:45 CONNECT TCP Peer: "::1:32798" Local: "::1:4949"
> > Invalid netblock: 127.255.255.255-0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 at 
> > /usr/share/perl5/Net/Server.pm line 849
> > 2011/09/28-18:25:32 CONNECT TCP Peer: 
> > "2001:15c0:66bc:0:211:11ff:fe92:3e20:33975" Local: 
> > "2001:15c0:66bc:0:211:11ff:fe92:3e20:4949"
> 
> Could this be related to the way connections are controlled in 
> munin-node.conf? I have it via
> 
>   allow ^127\.0\.0\.1$
> and
>   allow ^$munin_server$
> 
> Do you use cidr_allow/cidr_deny?

Good point:

root@belanna:~# grep allow /etc/munin/munin-node.conf | grep -v ^#
allow ^127\.0\.0\.1$
cidr_allow 127.0.0.1/8
cidr_allow 192.168.0.0/24


> > - Ansgar mentioned sys.net.ipv6.bindv6only on IRC.
> > So, with net.ipv6.bindv6only = 1 there's no ipv4 connection; with = 0
> > ipv4 works.
> Good catch. It seems I have 'net.ipv6.bindv6only = 0' in 
> /etc/sysctl.d/bindv6only.conf. Not sure where that came from. It is 
> quite possible that I have set the value at some point in the past.

It broke some programs when it was introduced, so you were probably
using one of those :)
 
> > And ipv6 works connection-wise in both cases but doesn't
> > generate a prompt in my telnet attempt?!
> ipv6 is weird, you say? :))

Sounds more related to my *allow settings; in general ipv6 works
nicely :)


Yup, works. I.e. after I add allows for ipv6 addresses, I can telnet
to ::1 and I get the prompt.


Doesn't answer the "binds only to ipv6" problem, though ...


Cheers,
gregor

-- 
 .''`.   Homepage: http://info.comodo.priv.at/ - OpenPGP key ID: 0x8649AA06
 : :' :  Debian GNU/Linux user, admin, & developer - http://www.debian.org/
 `. `'   Member of VIBE!AT & SPI, fellow of Free Software Foundation Europe
   `-    NP: Beach Boys: Wouldn't It Be Nice

Attachment: signature.asc
Description: Digital signature

Reply via email to