> Now when I "tracepath6 -n 2000:ffff::73.xxx.67.1 from the test > host, I get: > ... > If I "tracepath 73.xxx.67.1" from the jool host, I get a real > trace with real names that goes "no reply" one step earlier.
I can't explain the "goes 'no reply' one step earlier" thing, but as for the rest, check this out: https://jool.mx/en/usr-flags-global.html#--source-icmpv6-errors-better > Specifically, I cannot "wget http://whatsmyip.org". It returns > an empty file. I think this is a separate problem. Let me see if I can reproduce it. On Fri, Dec 22, 2017 at 2:17 AM, Kurt Lund <[email protected]> wrote: > I followed the instructions very carefully, but had to use a different > prefix (I used 2000:ffff::/96, that I stole from the old NAT-PT > documentation) because I (stupidly) used the whole /64 that was given to me > when setting up my dual stack nodes, so Jool complained when I tried to use > a /96 in the config. > > It "works" in that I can use Jool to connect to a IPV4 device in my network > from a IPv6-only node, but any attempt to connect outside my network has > issues. > > IPv6 side: 2604:xxxx:0:a::/64 > IPv4 side: 216.xxx.228.0/29 AND 216.xxx.228.8/29 > Jool setup: Centos 7, single NIC > Kernel module "jool" loaded with "modprobe --first-time jool > pool6=2000:ffff::/96" > IPv4: using host address of 216.xxx.228.6 > IPv6: using host address of 2604:xxxx:0:a:e6::e406 > > Text IPv6 host: 2604:xxxx:0:a:4::2 > Test IPv4 host: 216.xxx.228.13 (although it is a dual stack node, I have > confirmed that Jool was used to translate the IP) > > Test: "ssh 2000:ffff::216.xxx.228.13" (confirmed on target by "netstat -an > | grep 216.xxx.228.6" and finding only one entry -- me) > "jool --bib --display" shows the mapping: > TCP: > [Dynamic] 216.xxx.228.6#62327 - 2604:xxxx:0:a:4::2#35038 > > Now when I "tracepath6 -n 2000:ffff::73.xxx.67.1 from the test host, I get: > > 1?: [LOCALHOST] 0.029ms pmtu 1500 > 1: 2604:xxxx:0:a:e6::e406 144.339ms asymm 2 > 1: 2604:xxxx:0:a:e6::e406 5.092ms asymm 2 > 2: 2000:ffff::49xx:4301 1.151ms asymm 3 > 3: 2000:ffff::49xx:4301 1.469ms asymm 4 > 4: 2000:ffff::49xx:4301 1.226ms asymm 5 > 5: 2000:ffff::49xx:4301 2.073ms asymm 6 > 6: 2000:ffff::49xx:4301 2.538ms asymm 7 > 7: 2000:ffff::49xx:4301 3.340ms asymm 8 > 8: 2000:ffff::49xx:4301 3.512ms asymm 9 > 9: 2000:ffff::49xx:4301 9.436ms asymm 7 > 10: 2000:ffff::49xx:4301 7.961ms asymm 5 > 11: 2000:ffff::49xx:4301 11.584ms asymm 6 > 12: 2000:ffff::49xx:4301 11.678ms asymm 7 > 13: no reply > 14: no reply > 15: no reply > > If I "tracepath 73.xxx.67.1" from the jool host, I get a real trace with > real names that goes "no reply" one step earlier. > > Maybe this is not a big deal (it only seems to mask ICMP stuff) but I also > can't access public nodes with other (more important) protocols. > Specifically, I cannot "wget http://whatsmyip.org". It returns an empty > file. > > HELP!! > > Thanks, > Kurt Lund > [email protected] > RealAcquisitions.com > > _______________________________________________ > Jool-list mailing list > [email protected] > https://mail-lists.nic.mx/listas/listinfo/jool-list > _______________________________________________ Jool-list mailing list [email protected] https://mail-lists.nic.mx/listas/listinfo/jool-list
