Re: IPv6 routing issue with Telegram
Hi, Can you check the offered cipher using openssl s_client ? It could be that there is no suggested cipher or changing suggested cipher between ipv4 vs ipv6, (something that can happen with some farms and other load balancing systems) . On Thursday, 11 January 2024 12:18:24 IST Rabin Yasharzadehe wrote: > Nice catch, > > IPv4 works, as the moment I remove the address from my interface, I can > connect to the site. > From what I can see, it does able to complete the TLS handshake, and I can > see the certificate. > And I see the same behavior from inside a container. > > Ping to the address seems to be working, and I don't see any routing issue > to the destination. > > Issue with telegram service? > > > > -- > Rabin > > > On Wed, 10 Jan 2024 at 07:52, Lior Okman wrote: > > > > > Looking at the curl output, it manages to connect using IPv6 and is timing > > out on the SSL negotiation. > > > > > > Few things to check: > > > > - Does this work for you with IPv4? > > - Can you use "openssl s_client" to see if your environment manages to > > finish the SSL handshake? > > - Can you try to connect from inside a Docker container that is using a > > different base distro? > > > > > > -- > > Lior > > > > > > > > On Tue, 09 Jan 2024 13:17:23 +0200 *Rabin Yasharzadehe > > >* wrote --- > > > > Hi list, > > > > Can you please help me identify if the issue, is in my end / ISP (Bezeq) > > and not the service it self. > > > > When I try to load telegram web, with IPv6 address, the connection will > > hang for me. > > > > > > ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ > > * processing: https://web.telegram.org/ > > * Trying [2001:67c:4e8:f004::9]:443... > > * Connected to web.telegram.org (2001:67c:4e8:f004::9) port 443 > > * ALPN: offers h2,http/1.1 > > * TLSv1.3 (OUT), TLS handshake, Client hello (1): > > * CAfile: /etc/pki/tls/certs/ca-bundle.crt > > * CApath: none > > * SSL connection timeout > > * Closing connection > > curl: (28) SSL connection timeout > > > > > > But I don't have this issue with other IPv6 services, like google.com > > > > Can you please check on your side? and which ISP are you using? > > > > Thanks. Regards > > > > -- > > Rabin > > ___ > > Linux-il mailing list -- linux-il@cs.huji.ac.il > > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il > > > > > > > ___ Linux-il mailing list -- linux-il@cs.huji.ac.il To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
Re: IPv6 routing issue with Telegram
Nice catch, IPv4 works, as the moment I remove the address from my interface, I can connect to the site. >From what I can see, it does able to complete the TLS handshake, and I can see the certificate. And I see the same behavior from inside a container. Ping to the address seems to be working, and I don't see any routing issue to the destination. Issue with telegram service? -- Rabin On Wed, 10 Jan 2024 at 07:52, Lior Okman wrote: > > Looking at the curl output, it manages to connect using IPv6 and is timing > out on the SSL negotiation. > > > Few things to check: > > - Does this work for you with IPv4? > - Can you use "openssl s_client" to see if your environment manages to > finish the SSL handshake? > - Can you try to connect from inside a Docker container that is using a > different base distro? > > > -- > Lior > > > > On Tue, 09 Jan 2024 13:17:23 +0200 *Rabin Yasharzadehe > >* wrote --- > > Hi list, > > Can you please help me identify if the issue, is in my end / ISP (Bezeq) > and not the service it self. > > When I try to load telegram web, with IPv6 address, the connection will > hang for me. > > > ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ > * processing: https://web.telegram.org/ > * Trying [2001:67c:4e8:f004::9]:443... > * Connected to web.telegram.org (2001:67c:4e8:f004::9) port 443 > * ALPN: offers h2,http/1.1 > * TLSv1.3 (OUT), TLS handshake, Client hello (1): > * CAfile: /etc/pki/tls/certs/ca-bundle.crt > * CApath: none > * SSL connection timeout > * Closing connection > curl: (28) SSL connection timeout > > > But I don't have this issue with other IPv6 services, like google.com > > Can you please check on your side? and which ISP are you using? > > Thanks. Regards > > -- > Rabin > ___ > Linux-il mailing list -- linux-il@cs.huji.ac.il > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il > > > ___ Linux-il mailing list -- linux-il@cs.huji.ac.il To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
Re: IPv6 routing issue with Telegram
Looking at the curl output, it manages to connect using IPv6 and is timing out on the SSL negotiation. Few things to check: - Does this work for you with IPv4? - Can you use "openssl s_client" to see if your environment manages to finish the SSL handshake? - Can you try to connect from inside a Docker container that is using a different base distro? -- Lior On Tue, 09 Jan 2024 13:17:23 +0200 Rabin Yasharzadehe wrote --- Hi list, Can you please help me identify if the issue, is in my end / ISP (Bezeq) and not the service it self. When I try to load telegram web, with IPv6 address, the connection will hang for me. ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ * processing: https://web.telegram.org/ * Trying [2001:67c:4e8:f004::9]:443... * Connected to http://web.telegram.org (2001:67c:4e8:f004::9) port 443 * ALPN: offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * CAfile: /etc/pki/tls/certs/ca-bundle.crt * CApath: none * SSL connection timeout * Closing connection curl: (28) SSL connection timeout But I don't have this issue with other IPv6 services, like http://google.com Can you please check on your side? and which ISP are you using? Thanks. Regards -- Rabin ___ Linux-il mailing list -- mailto:linux-il@cs.huji.ac.il To unsubscribe send an email to mailto:linux-il-le...@cs.huji.ac.il___ Linux-il mailing list -- linux-il@cs.huji.ac.il To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
Re: IPv6 routing issue with Telegram
I tried both: curl --connect-timeout 3 -ipv6 https://web.telegram.org/ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ In both cases, the response was prompt. I am connected to the Internet via Bezeq (as infrastructure provider) and Partner (as ISP). I got IPv6 from Partner several months ago, and replaced the router due to this. United we shall win, --- Omer Zak On Tue, 2024-01-09 at 13:17 +0200, Rabin Yasharzadehe wrote: > Hi list, > > Can you please help me identify if the issue, is in my end / ISP > (Bezeq) > and not the service it self. > > When I try to load telegram web, with IPv6 address, the connection > will hang for me. > > ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ > * processing: https://web.telegram.org/ > * Trying [2001:67c:4e8:f004::9]:443... > * Connected to web.telegram.org (2001:67c:4e8:f004::9) port 443 > * ALPN: offers h2,http/1.1 > * TLSv1.3 (OUT), TLS handshake, Client hello (1): > * CAfile: /etc/pki/tls/certs/ca-bundle.crt > * CApath: none > * SSL connection timeout > * Closing connection > curl: (28) SSL connection timeout > > > But I don't have this issue with other IPv6 services, like google.com > > Can you please check on your side? and which ISP are you using? -- "Prior to capitalism, the way people amassed great wealth was by looting, plundering and enslaving their fellow man. Capitalism made it possible to become wealthy by serving your fellow man." - Walter E. Williams My own blog is at https://tddpirate.zak.co.il/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at https://www.zak.co.il/spamwarning.html ___ Linux-il mailing list -- linux-il@cs.huji.ac.il To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
IPv6 routing issue with Telegram
Hi list, Can you please help me identify if the issue, is in my end / ISP (Bezeq) and not the service it self. When I try to load telegram web, with IPv6 address, the connection will hang for me. ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/ * processing: https://web.telegram.org/ * Trying [2001:67c:4e8:f004::9]:443... * Connected to web.telegram.org (2001:67c:4e8:f004::9) port 443 * ALPN: offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * CAfile: /etc/pki/tls/certs/ca-bundle.crt * CApath: none * SSL connection timeout * Closing connection curl: (28) SSL connection timeout But I don't have this issue with other IPv6 services, like google.com Can you please check on your side? and which ISP are you using? Thanks. Regards -- Rabin ___ Linux-il mailing list -- linux-il@cs.huji.ac.il To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
Re: .il domain names with IPv6 support
I think like Uri, I don't see any reason to use registrar name server, use any DNS service you like. You just need the DNS URL to register with the registrar. I use DigitalOcean, I have few virtual machines there and use their free DNS service. -- Ori Idan CEO Helicon Books http://www.heliconbooks.com On Wed, Aug 2, 2023 at 8:53 AM אורי wrote: > Hi Gabor, > > I also use https://www.box.co.il/ and you can put any name servers you > want, I usually don't use the same company as a registrar and for name > servers - I use different companies. I would recommend either AWS route 53 > (not expensive) or also DigitalOcean - if you have an account then name > servers are free, I think you don't have to have droplets with them > (although I do) and also you can try Linode or Vultr (I never tried these > two companies' name servers). Or use the name servers of your hosting > provider. > > Thanks, > Uri. > אורי > u...@speedy.net > > > On Wed, Aug 2, 2023 at 8:34 AM Gabor Szabo wrote: > >> Hi, >> >> I have been using BOX ( https://box.co.il/ ) for my .il domains and for >> DNS. Apparently their DNS server still does not support IPv6. So far it >> did not bother me too much, but now that I am trying to move a domain to >> use GitHub pages it seems that they require that configuration as well. >> >> So my question what do you suggest as a domain registrar for .il domains >> that has a reasonable DNS interface that also supports IPv6. Alternatively, >> what DNS provider do you use? >> >> (for my com/org names I use https://iwantmyname.com/ and I am quite >> satisfied) >> >> regards >> Gabor >> >> -- >> Gabor Szabohttps://szabgab.com/ <http://szabgab.com/> >> >> ___ >> Linux-il mailing list >> Linux-il@cs.huji.ac.il >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il >> > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: .il domain names with IPv6 support
i am quite satisfied with he.net - hurricane electric. 2 Aug 2023 07:53:03 אורי : > Hi Gabor, > > I also use https://www.box.co.il/ and you can put any name servers you want, > I usually don't use the same company as a registrar and for name servers - I > use different companies. I would recommend either AWS route 53 (not > expensive) or also DigitalOcean - if you have an account then name servers > are free, I think you don't have to have droplets with them (although I do) > and also you can try Linode or Vultr (I never tried these two companies' name > servers). Or use the name servers of your hosting provider. > > Thanks, > Uri. > אורי > u...@speedy.net > > > On Wed, Aug 2, 2023 at 8:34 AM Gabor Szabo wrote: >> Hi, >> >> I have been using BOX ( https://box.co.il/ ) for my .il domains and for DNS. >> Apparently their DNS server still does not support IPv6. So far it did not >> bother me too much, but now that I am trying to move a domain to use GitHub >> pages it seems that they require that configuration as well. >> >> So my question what do you suggest as a domain registrar for .il domains >> that has a reasonable DNS interface that also supports IPv6. Alternatively, >> what DNS provider do you use? >> >> (for my com/org names I use https://iwantmyname.com/ and I am quite >> satisfied) >> >> regards >> Gabor >> >> -- >> Gabor Szabo https://szabgab.com/[http://szabgab.com/] >> >> ___ >> Linux-il mailing list >> Linux-il@cs.huji.ac.il >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: .il domain names with IPv6 support
Same as Omer, I don't use my domain registrar infrastructure. I delegate all my domains to cloud flare, and manage them all from there, and it is free. I use cf API to manage the records, issue certs with letencreypt. And provide a Dynamic DNS records for services I host. All the best On Wed, 2 Aug 2023, 08:34 Gabor Szabo, wrote: > Hi, > > I have been using BOX ( https://box.co.il/ ) for my .il domains and for > DNS. Apparently their DNS server still does not support IPv6. So far it > did not bother me too much, but now that I am trying to move a domain to > use GitHub pages it seems that they require that configuration as well. > > So my question what do you suggest as a domain registrar for .il domains > that has a reasonable DNS interface that also supports IPv6. Alternatively, > what DNS provider do you use? > > (for my com/org names I use https://iwantmyname.com/ and I am quite > satisfied) > > regards > Gabor > > -- > Gabor Szabohttps://szabgab.com/ <http://szabgab.com/> > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: .il domain names with IPv6 support
Hi Gabor, I also use https://www.box.co.il/ and you can put any name servers you want, I usually don't use the same company as a registrar and for name servers - I use different companies. I would recommend either AWS route 53 (not expensive) or also DigitalOcean - if you have an account then name servers are free, I think you don't have to have droplets with them (although I do) and also you can try Linode or Vultr (I never tried these two companies' name servers). Or use the name servers of your hosting provider. Thanks, Uri. אורי u...@speedy.net On Wed, Aug 2, 2023 at 8:34 AM Gabor Szabo wrote: > Hi, > > I have been using BOX ( https://box.co.il/ ) for my .il domains and for > DNS. Apparently their DNS server still does not support IPv6. So far it > did not bother me too much, but now that I am trying to move a domain to > use GitHub pages it seems that they require that configuration as well. > > So my question what do you suggest as a domain registrar for .il domains > that has a reasonable DNS interface that also supports IPv6. Alternatively, > what DNS provider do you use? > > (for my com/org names I use https://iwantmyname.com/ and I am quite > satisfied) > > regards > Gabor > > -- > Gabor Szabohttps://szabgab.com/ <http://szabgab.com/> > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: .il domain names with IPv6 support
Hello Gabor, I use LiveDns and they support IPv6 for domain registration, but not for DNS serving. I configured my domain registrations to use CloudFlare (free plan), as DNS server for both IPv4 and IPv6. --- Omer Zak On Wed, 2023-08-02 at 08:33 +0300, Gabor Szabo wrote: > Hi, > > I have been using BOX ( https://box.co.il/ ) for my .il domains and > for DNS. Apparently their DNS server still does not support IPv6. So > far it did not bother me too much, but now that I am trying to move a > domain to use GitHub pages it seems that they require that > configuration as well. > > So my question what do you suggest as a domain registrar for .il > domains that has a reasonable DNS interface that also supports IPv6. > Alternatively, what DNS provider do you use? > > (for my com/org names I use https://iwantmyname.com/ and I am quite > satisfied) -- "Prior to capitalism, the way people amassed great wealth was by looting, plundering and enslaving their fellow man. Capitalism made it possible to become wealthy by serving your fellow man." - Walter E. Williams My own blog is at https://tddpirate.zak.co.il/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at https://www.zak.co.il/spamwarning.html ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
.il domain names with IPv6 support
Hi, I have been using BOX ( https://box.co.il/ ) for my .il domains and for DNS. Apparently their DNS server still does not support IPv6. So far it did not bother me too much, but now that I am trying to move a domain to use GitHub pages it seems that they require that configuration as well. So my question what do you suggest as a domain registrar for .il domains that has a reasonable DNS interface that also supports IPv6. Alternatively, what DNS provider do you use? (for my com/org names I use https://iwantmyname.com/ and I am quite satisfied) regards Gabor -- Gabor Szabohttps://szabgab.com/ <http://szabgab.com/> ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP recommendation in Israel - geek-friendly & IPv6
I do not know, I only know to begin with my external ip was a private one (if I remember correctly it was 172.x.x.x) On Sun, Apr 16, 2023 at 2:50 PM wrote: > On Sunday, 16 April 2023 9:07:10 IDT Erez D wrote: > > You look for a Fixed ipv4 IP, Note that some ISPs do not give you even a > > real IP but you are already behind NAT and can't even use Dynamic DNS. > > > > Carrier grade NAT or something else ? > > > > > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP recommendation in Israel - geek-friendly & IPv6
On Sunday, 16 April 2023 9:07:10 IDT Erez D wrote: > You look for a Fixed ipv4 IP, Note that some ISPs do not give you even a > real IP but you are already behind NAT and can't even use Dynamic DNS. > Carrier grade NAT or something else ? ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP recommendation in Israel - geek-friendly & IPv6
You look for a Fixed ipv4 IP, Note that some ISPs do not give you even a real IP but you are already behind NAT and can't even use Dynamic DNS. With HOT they gave me a non-real IP and I needed to persuade them to change it to a real one (I do not need a real one as I am using DynDNS) At the end they gave me a real IP with no extra cost Erez. On Sat, Apr 15, 2023 at 10:10 AM Lionel Élie Mamane wrote: > Hi, > > What would you recommend as a geek-friendly ISP for a "consumer price > level" glass fiber-based Internet connection in Israel, in Qesarya > specifically? I'd like to have dual stack IPv4 + IPv6, with one fixed > IPv4 address and a fixed IPv6 prefix (whatever it is one gets as > standard... a /48, a /56...). Not sure if I can hope for competent > customer support in English, but if that exists, even better. > > My family currently has Bezeq with a fixed IPv4 in our "2nd home / > vacation home", that was setup by a local guy that knows a guy that > knows a guy that knows my mother, without my intervention, supposed to > be a "surprise we got fast Internet now, you can now spend more time > in Israel and work remotely" for me, and well... I'd like us to > upgrade to something better. The guy tells me that if we activate IPv6 > on our Bezeq connection, we will not only loose the fixed IPv4 > address, but also be behind double (carrier-grade, I assume) NAT, > which would be major suckage. Is that true? Anyone has experience with > that? > > Is it realistic to hope significantly less than 100ms ping times to > Western Europe from Israel? That's what I currently get, and in usage > as "remote desktop" / VNC / ssh sessions (with graphical / X11 > programs running over the link), this kind of lag is really felt... > > Thanks in advance, > > Lionel > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP recommendation in Israel - geek-friendly & IPv6
I have Partner fiber. Note that fiber ISP is area dependent. You'll have to check availability in your area. ISP with fiber (That I know of. There are also virtual ISPs): Bezeq, Partner, Unlimited, Cellcom and Hot. Don't use Hot. Bad customer service. No idea about static IP. As per Ministry of Communications regulations all ISPs must offer IPv6. With Partner I get ~70ms to western Europe. On Sat, Apr 15, 2023 at 10:10 AM Lionel Élie Mamane wrote: > Hi, > > What would you recommend as a geek-friendly ISP for a "consumer price > level" glass fiber-based Internet connection in Israel, in Qesarya > specifically? I'd like to have dual stack IPv4 + IPv6, with one fixed > IPv4 address and a fixed IPv6 prefix (whatever it is one gets as > standard... a /48, a /56...). Not sure if I can hope for competent > customer support in English, but if that exists, even better. > > My family currently has Bezeq with a fixed IPv4 in our "2nd home / > vacation home", that was setup by a local guy that knows a guy that > knows a guy that knows my mother, without my intervention, supposed to > be a "surprise we got fast Internet now, you can now spend more time > in Israel and work remotely" for me, and well... I'd like us to > upgrade to something better. The guy tells me that if we activate IPv6 > on our Bezeq connection, we will not only loose the fixed IPv4 > address, but also be behind double (carrier-grade, I assume) NAT, > which would be major suckage. Is that true? Anyone has experience with > that? > > Is it realistic to hope significantly less than 100ms ping times to > Western Europe from Israel? That's what I currently get, and in usage > as "remote desktop" / VNC / ssh sessions (with graphical / X11 > programs running over the link), this kind of lag is really felt... > > Thanks in advance, > > Lionel > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP recommendation in Israel - geek-friendly & IPv6
Hi Lionel, I don't know about all the technical issues but I'm satisfied with Triple C. And I don't use Bezeq's fibers although it's possible. If you're interested in speed (ping/download/upload) to Europe, check in speedtest.net and you can write to me offlist to compare times. Thanks, Uri. אורי u...@speedy.net On Sat, Apr 15, 2023 at 10:10 AM Lionel Élie Mamane wrote: > Hi, > > What would you recommend as a geek-friendly ISP for a "consumer price > level" glass fiber-based Internet connection in Israel, in Qesarya > specifically? I'd like to have dual stack IPv4 + IPv6, with one fixed > IPv4 address and a fixed IPv6 prefix (whatever it is one gets as > standard... a /48, a /56...). Not sure if I can hope for competent > customer support in English, but if that exists, even better. > > My family currently has Bezeq with a fixed IPv4 in our "2nd home / > vacation home", that was setup by a local guy that knows a guy that > knows a guy that knows my mother, without my intervention, supposed to > be a "surprise we got fast Internet now, you can now spend more time > in Israel and work remotely" for me, and well... I'd like us to > upgrade to something better. The guy tells me that if we activate IPv6 > on our Bezeq connection, we will not only loose the fixed IPv4 > address, but also be behind double (carrier-grade, I assume) NAT, > which would be major suckage. Is that true? Anyone has experience with > that? > > Is it realistic to hope significantly less than 100ms ping times to > Western Europe from Israel? That's what I currently get, and in usage > as "remote desktop" / VNC / ssh sessions (with graphical / X11 > programs running over the link), this kind of lag is really felt... > > Thanks in advance, > > Lionel > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
ISP recommendation in Israel - geek-friendly & IPv6
Hi, What would you recommend as a geek-friendly ISP for a "consumer price level" glass fiber-based Internet connection in Israel, in Qesarya specifically? I'd like to have dual stack IPv4 + IPv6, with one fixed IPv4 address and a fixed IPv6 prefix (whatever it is one gets as standard... a /48, a /56...). Not sure if I can hope for competent customer support in English, but if that exists, even better. My family currently has Bezeq with a fixed IPv4 in our "2nd home / vacation home", that was setup by a local guy that knows a guy that knows a guy that knows my mother, without my intervention, supposed to be a "surprise we got fast Internet now, you can now spend more time in Israel and work remotely" for me, and well... I'd like us to upgrade to something better. The guy tells me that if we activate IPv6 on our Bezeq connection, we will not only loose the fixed IPv4 address, but also be behind double (carrier-grade, I assume) NAT, which would be major suckage. Is that true? Anyone has experience with that? Is it realistic to hope significantly less than 100ms ping times to Western Europe from Israel? That's what I currently get, and in usage as "remote desktop" / VNC / ssh sessions (with graphical / X11 programs running over the link), this kind of lag is really felt... Thanks in advance, Lionel ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: disabling ipv6
> as I said, best is a firewall, however GBE capable pfsense HW starts at > 1000 NIS + need at least another 200 for an AP, Hi, Late reply, but here goes: You can repurpose (or add capability) to any existing x86/rpi system in your home, you'll need a wifi USB dongle (if said system isn't already wifi equipped). Personally, I've run IPAM on a 1GB 1vCPU KVM guest with RAM to spare. Debian detected low memory mode at ~512MB RAM and was able to run that lean. Redhat.. not so much. PFsense and such are nice, however and iptables/firewalld would do just as well. That system will be your LAN router, DNS, AP, and will act as an IPv6to4 gateway for all LAN clients. As far as the ISP modem is concerned, the only client it will know is the system in discussion here. This will be fine until you will need inbound access as well (ssh to home, for example), then you'll have to worry about two forwarding rule sets, rather than one. Good luck :) -- Guy Gold ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: disabling ipv6
as I said, best is a firewall, however GBE capable pfsense HW starts at 1000 NIS + need at least another 200 for an AP, this 1k NIS i wanted to save if i could find a satisfying solution however in HOT 4 router i can't disable or firewall ipv6, so i thought a simple dhcpv6 server could solve my problem ... On Sun, Nov 7, 2021 at 10:52 AM Rabin Yasharzadehe wrote: > For best control you should go with the option of splitting the ISP router > to only act as modem, and have a FW like PFsense/OpenSense for the rest > (FW,DHCP 4/6, DNS, ). > and have several wireless APs spread across the house, which act only as > AP base stations. It's a bit more expensive, but it will give you the peace > of mind you are looking for. > > > > > -- > Rabin > > > On Sun, 7 Nov 2021 at 10:28, Erez D wrote: > >> Hello >> >> I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't >> turn off. >> I have a few issues with ipv6: >> 1. no NAT so all my devices are accessible from outside >> 2. can't redirect DNS traffic to my DNS server >> >> I thought about adding a firewall, but this way i need a small >> fast-enough HW for this which is expensive, as well as disable HOT's router >> wifi so i actually need a wifi router ... >> >> can't i just install a dhcpv6 server on an RPi, which will hijack the >> default route and DNS servers, and so actually disable ipv6 ? >> >> Thanks, >> Erez. >> ___ >> Linux-il mailing list >> Linux-il@cs.huji.ac.il >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il >> > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: disabling ipv6
All home routers should be able to firewall incoming IPv6 traffic, so it would be better to just firewall it, instead of disabling. If you use Hot's modem (hotbox) as a router, then it can do that. At least in the case of Hotbox2, it does so by default, so you should not worry about the first issue. Please also note that DHCPv6 is not the only (or even the mainly used) configuration protocol for network parameters, so it is not so easy to disable IPv6 network wide, if your router does not have this option. On Sun, 7 Nov 2021 at 10:27, Erez D wrote: > > Hello > > I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't turn > off. > I have a few issues with ipv6: > 1. no NAT so all my devices are accessible from outside > 2. can't redirect DNS traffic to my DNS server > > I thought about adding a firewall, but this way i need a small fast-enough HW > for this which is expensive, as well as disable HOT's router wifi so i > actually need a wifi router ... > > can't i just install a dhcpv6 server on an RPi, which will hijack the default > route and DNS servers, and so actually disable ipv6 ? > > Thanks, > Erez. > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il -- Matan. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: disabling ipv6
For best control you should go with the option of splitting the ISP router to only act as modem, and have a FW like PFsense/OpenSense for the rest (FW,DHCP 4/6, DNS, ). and have several wireless APs spread across the house, which act only as AP base stations. It's a bit more expensive, but it will give you the peace of mind you are looking for. -- Rabin On Sun, 7 Nov 2021 at 10:28, Erez D wrote: > Hello > > I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't > turn off. > I have a few issues with ipv6: > 1. no NAT so all my devices are accessible from outside > 2. can't redirect DNS traffic to my DNS server > > I thought about adding a firewall, but this way i need a small fast-enough > HW for this which is expensive, as well as disable HOT's router wifi so i > actually need a wifi router ... > > can't i just install a dhcpv6 server on an RPi, which will hijack the > default route and DNS servers, and so actually disable ipv6 ? > > Thanks, > Erez. > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
disabling ipv6
Hello I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't turn off. I have a few issues with ipv6: 1. no NAT so all my devices are accessible from outside 2. can't redirect DNS traffic to my DNS server I thought about adding a firewall, but this way i need a small fast-enough HW for this which is expensive, as well as disable HOT's router wifi so i actually need a wifi router ... can't i just install a dhcpv6 server on an RPi, which will hijack the default route and DNS servers, and so actually disable ipv6 ? Thanks, Erez. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: disabling ipv6
Hi Erez, You should be able to disable DHCP on the router, and pass all logic to a secondary DHCP server. You can prepend your DNS server as first among DNS servers on each client (also make sure that your DNS server can answer for ), you can add one line in /etc/dhcp/dhclient.conf (for dhcp clients) You should not trust NAT as a security mechanism, specifically when you have a foreign device inside your network . You should be able on your router to pass only ULA and not the public prefix you get. It is EXTREMELY important to separate your ISP router and your own one, it is better to run your own pfsense / openwrt with full control than to trust a third party device. You can disable ipv6 on client level via /etc/sysctl.d/XX_disable_ipv6.conf (just add one line net.ipv6.conf.all.disable_ipv6 = 1 it will disable ipv6 on all interfaces )- this is a VERY bad approach, but it is what you are asking for. You should enable per client router, do you really trust provider router not to attack your pc ? On Sunday, 7 November 2021 10:27:03 IST Erez D wrote: Hello I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't turn off. I have a few issues with ipv6: 1. no NAT so all my devices are accessible from outside 2. can't redirect DNS traffic to my DNS server I thought about adding a firewall, but this way i need a small fast-enough HW for this which is expensive, as well as disable HOT's router wifi so i actually need a wifi router ... can't i just install a dhcpv6 server on an RPi, which will hijack the default route and DNS servers, and so actually disable ipv6 ? Thanks, Erez. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
Thanks everyone. On 30 Jan 2016 12:43 a.m., "Yuval Adam" <yu...@y3xz.com> wrote: > > > On 01/29/2016 11:52 AM, Amos Shapira wrote: > > > > Does anyone here have experience with public IPv6 in the cloud > > (AWS/DigitalOcean/Google, in decreasing order of preference)? > > > > Yes, I run my personal server on Digital Ocean + native IPv6 and it > works great. > > Unfortunately, IPv6 support on AWS is partial, at best - > If you use Route53 for your DNS records you can assign records to > domains, but the Route53 nameservers do not publish any IPv6 addresses > so it's impossible to reach them on IPv6-only. > EC2 instances are not assigned IPv6 addresses, and you have to route > through an ELB if you want that. > > No information on Google Cloud. > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
On 01/29/2016 11:52 AM, Amos Shapira wrote: > > Does anyone here have experience with public IPv6 in the cloud > (AWS/DigitalOcean/Google, in decreasing order of preference)? > Yes, I run my personal server on Digital Ocean + native IPv6 and it works great. Unfortunately, IPv6 support on AWS is partial, at best - If you use Route53 for your DNS records you can assign records to domains, but the Route53 nameservers do not publish any IPv6 addresses so it's impossible to reach them on IPv6-only. EC2 instances are not assigned IPv6 addresses, and you have to route through an ELB if you want that. No information on Google Cloud. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
Does anyone here have experience with public IPv6 in the cloud (AWS/DigitalOcean/Google, in decreasing order of preference)? On 29 Jan 2016 6:19 a.m., "E.S. Rosenberg" <esr+linux...@g.jct.ac.il> wrote: 2016-01-28 20:37 GMT+02:00 Beni Cherniavsky-Paskin < beni.cherniav...@gmail.com>: > Due to bezeq's modem's wifi unreliability, I'm mostly connecting to my > own wifi router anyway. > I'd have switched to it completely and use a firewall there, except > it's old and doesn't support IPv6 at all, and I haven't gotten around > to buy a new one and/or install *WRT. I also use bezeq boxes as modem-only and have an OpenWRT box behind them, TP-Link makes very nice boxes that support OpenWRT (their cheapest model is the 80NIS 741ND which is very good alue for money) > > I'm also a general believer in securing my laptops rather than my > network, as I'm connecting to any and all wifis when traveling, > and I've been deliberately running an unsecured wifi for years, > valuing helping neighbors & passers-by over security (nowdays there is > no dillema I'm shifting to separate guest networks). No question that your laptop should be secure but that is no reason to leave your desktop, printer, NAS, home automation, home security etc. unsecured. > > To some degree, the desire of dropping NAT and having > world-addressable machines inherently conflicts with the desire to > have a firewall. That is non-sense, I worked at several locations with IP addresses as water and just because we had all our machines (even on WiFi) have world-addressable IPs didn't mean we didn't have a firewall to limit access from the outside to be only through the paths we allowed. There is also no real valid reason to allow the outside world to be able to scan your inside network NAT always sort provided that out of the box but a good firewall does that even without NAT. > > But the wisdom of all this is of course debatable. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
On Fri, 29 Jan 2016, Amos Shapira wrote: Does anyone here have experience with public IPv6 in the cloud (AWS/DigitalOcean/Google, in decreasing order of preference)? Regarding AWS, the word seems to be that the only way you can make an EC2 instance available via IPv6 is to put a loadbalancer in front of it, and there is even some uncertainty about this much. https://forums.aws.amazon.com/thread.jspa?messageID=536049 Don't know about either of the other two. Have used it in Linode and Gandi Hosting with no problems. Geoff. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
It is of course highly recommended to figure out a way to use the firewall in the router in IPv6 mode too Changing your setup to local fws only makes you both more vulnerable to attack and the total setup much harder to manage In a worst (or best depends on how you look at it) case scenario I would even say put a computer with 2 NICs between your network and the Internet and setup iptables/nftables/your favorite firewall there... (I wonder if a raspberry pi would be able to pull that off) Regards, Eliyahu - אליהו 2016-01-28 16:49 GMT+02:00 Omer Zak <w...@zak.co.il>: > On Thu, 2016-01-28 at 15:55 +0200, Beni Cherniavsky-Paskin wrote: > >> Brain dump & tips on starting with IPv6 [I imagine Shachar knows all >> this but for others, including future me ;-]: > > A nice brain dump! > > To complement the brain dump, I'd like to see advice, from anyone who > has experience with this, about securing the hosts against intruders via > both IPv4 and IPv6 - in other words, per host firewall. > > The reasons for this are: > 1. The firewall in Bezeq's router is turned off in Beni's setup. > 2. Those of us, who are not willing to switch to Xfone yet wish to > breathe the IPv6 pixie dust, will need to use IPv6 over IPv4 tunnelling. > It means that the computer running the tunnel will need an IPv6 firewall > around the local tunnel's endpoint. > > Another piece of advice desired is as follows. > How to configure the home network so that: > 1. It'll use IPv6 internally. > 2. Communicate with the outside world via both IPv4 and IPv6 tunnel. > 3. When your ISP finally starts to support IPv6, switching the home > network to pure IPv6 would be piece of cake. > > --- Omer > > > -- > According to Jean Boutcher, I am "a baby man, whining". > My own blog is at http://www.zak.co.il/tddpirate/ > > My opinions, as expressed in this E-mail message, are mine alone. > They do not represent the official policy of any organization with which > I may be affiliated in any way. > WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
2016-01-28 20:37 GMT+02:00 Beni Cherniavsky-Paskin <beni.cherniav...@gmail.com>: > Due to bezeq's modem's wifi unreliability, I'm mostly connecting to my > own wifi router anyway. > I'd have switched to it completely and use a firewall there, except > it's old and doesn't support IPv6 at all, and I haven't gotten around > to buy a new one and/or install *WRT. I also use bezeq boxes as modem-only and have an OpenWRT box behind them, TP-Link makes very nice boxes that support OpenWRT (their cheapest model is the 80NIS 741ND which is very good alue for money) > > I'm also a general believer in securing my laptops rather than my > network, as I'm connecting to any and all wifis when traveling, > and I've been deliberately running an unsecured wifi for years, > valuing helping neighbors & passers-by over security (nowdays there is > no dillema I'm shifting to separate guest networks). No question that your laptop should be secure but that is no reason to leave your desktop, printer, NAS, home automation, home security etc. unsecured. > > To some degree, the desire of dropping NAT and having > world-addressable machines inherently conflicts with the desire to > have a firewall. That is non-sense, I worked at several locations with IP addresses as water and just because we had all our machines (even on WiFi) have world-addressable IPs didn't mean we didn't have a firewall to limit access from the outside to be only through the paths we allowed. There is also no real valid reason to allow the outside world to be able to scan your inside network NAT always sort provided that out of the box but a good firewall does that even without NAT. > > But the wisdom of all this is of course debatable. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
Due to bezeq's modem's wifi unreliability, I'm mostly connecting to my own wifi router anyway. I'd have switched to it completely and use a firewall there, except it's old and doesn't support IPv6 at all, and I haven't gotten around to buy a new one and/or install *WRT. I'm also a general believer in securing my laptops rather than my network, as I'm connecting to any and all wifis when traveling, and I've been deliberately running an unsecured wifi for years, valuing helping neighbors & passers-by over security (nowdays there is no dillema I'm shifting to separate guest networks). To some degree, the desire of dropping NAT and having world-addressable machines inherently conflicts with the desire to have a firewall. But the wisdom of all this is of course debatable. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
More pieces of the IPv6 puzzle (Re: ISP with native ipv6 in isarael)
On Thu, 2016-01-28 at 15:55 +0200, Beni Cherniavsky-Paskin wrote: > Brain dump & tips on starting with IPv6 [I imagine Shachar knows all > this but for others, including future me ;-]: A nice brain dump! To complement the brain dump, I'd like to see advice, from anyone who has experience with this, about securing the hosts against intruders via both IPv4 and IPv6 - in other words, per host firewall. The reasons for this are: 1. The firewall in Bezeq's router is turned off in Beni's setup. 2. Those of us, who are not willing to switch to Xfone yet wish to breathe the IPv6 pixie dust, will need to use IPv6 over IPv4 tunnelling. It means that the computer running the tunnel will need an IPv6 firewall around the local tunnel's endpoint. Another piece of advice desired is as follows. How to configure the home network so that: 1. It'll use IPv6 internally. 2. Communicate with the outside world via both IPv4 and IPv6 tunnel. 3. When your ISP finally starts to support IPv6, switching the home network to pure IPv6 would be piece of cake. --- Omer -- According to Jean Boutcher, I am "a baby man, whining". My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
2016-01-12 19:18 GMT+02:00 Shachar Shemesh <shac...@shemesh.biz>:
>
> Down sides:
> You are still going to be using NAT. Since the IPv6 support in Israel is
> virtually non-existent, which means you will be using your IPv4 address quite
> a lot. You only get one of those.
Do you mean still using NAT for IPv4 connections, or everything?
My machines all get world-addressable IPv6 addresses on Xfone (after
disabling firewall in bezeq's router, see below),
so there seems to be no NAT involved with IPv6.
IPv4 functions normally, obviously using NAT. It's hard to call that
a downside, since getting a dozen IPv4 addresses can't be cheap.
dump of mail (with small edits) I thought I sent Shachar and the
list about a year ago, but I see haven't reached the list
I've been using Xfone summer 2015 and am satisfied — but see problems
(A) (B) below.
I'm on Bezeq ADSL which gave me a free modem with wifi router
(DSL-6850U), whose wifi I really can't recommend (see (B)).
With zero configuration on my part every device (ubuntu, chromebox,
android) got an IPv6 address and outgoing IPv6 connections Just Worked
:-)
All it took* to get incoming IPv6 to any device to work is:
Setup -> WAN Service -> PPPoE -> ppp1.1: disabled firewall
(I believe this disables both IPv4 and IPv6 firewall, which I'm fine
with. There is a separate NAT setting which I left on — AFAICT all
NAT and port forwarding settings only affect IPv4.)
* after a lot of trial-and-error, but I logged all config chages and
am pretty confident this is all it takes.
AFAICT Xfone gives me a /64 block. Sounds enough to me, but I've seen
claims that ideally I should want /48 or /56 to allow subnetting
(really? all this fuss to go from 2^32 homes to 2^48 homes? what a
waste. RFC1606 notwithstanding, I haven't yet bought 2^64
individually addressable atoms...)
I'll be happy to answer any questions.
Problems:
(A) Speed on fastest plan is not so fastest?
For half a year I was on Xfone's 30/40 plan and Bezeq's "T40"
plan, which is their brilliantly devious marketing speak for "at least
20Mbps and *at most* 40Mbps" — in practice I was getting around 20,
but technically can't complain.
On the upside I'm always seeing a bit over the promised 3Mbps upload.
But yesterday I noticed that Bezeq upgraded me to "T100" — without
asking or telling me! — though for same 85/NIS price (at least till
first year ends), so I upgraded Xfone to the "all speeds above" plan
for only 10NIS more — and now I'm getting around 30Mbps (and same
3Mbps upload).
I don't know what's the physical ADSL limit here but modem reports
"B0 Line Rate - Upstream (Kbps): 5021, Downstream (Kbps): 49231" so I
could hope for a bit more?
Oh well, it's still faster and cheaper than I had in Los Angeles :-)
I'm mostly mentioning this because I've read a friend on facebook
saying a similar thing - that he was happy with Xfone until he
upgraded to the highest speed where they didn't deliver.
[UPDATE: a year later, I'm still on T100 & 100 plans, but
regularly measuring only 15~17Mbps. Time to complain and/or
downgrade... BTW, Nezeq's site advertises T100 as "maximum 100M
minimum 0.01M"!?]
(B) Internet connectivity lost several times a day (wifi still thinks
it's connected, but packets don't go anywhere), easily fixed by
disabling and re-enabling wifi on the device. Happens on both laptops
and android tablet.
This is lousy, I've never really managed to debug this but I'm
pretty sure Bezeq's router wifi is to blame, and not Xfone:
- It can happen on one device while others have fine connectivity.
Toggling wifi helps. Resetting the router helps.
- Most tellingly, a 2nd ethernet-chained wifi router behaves quite reliably.
However, that one only supports IPv4, so theoretically the
problem could be IPv6-specific (and due to no NAT, could involve the
ISP).
- Anecdotally, it happens less after I reduced the number of wifi
networks Bezeq's router maintains from 6 ({encrypted net, open guest
net, Bezeq Free captive portal net} X {2.4GHz, 5Ghz}) to 2 or 3...
Brain dump & tips on starting with IPv6 [I imagine Shachar knows all
this but for others, including future me ;-]:
test & check address: http://ip6.me, http://ipv6-test.com,
http://nmapv6.tools.uebi.net/
speed tests: http://speedtest.comcast.net/, http://proof.ovh.net/,
http://sixy.ch/tags/speed, http://ipv6-speedtest.net/
commands: ping6, curl -6, nmap -6. host prints both addresses if
known, -6 only affects how it talks to dhs server.
For a remote shell to test connectivity, Digital ocean is probably
simplest (look for IPv6 checkbox when creating a droplet, available in
most their locations).
IPv6 gives you several address, some local, some periodically rotated
[https://home.regit.org/2011/04/ipv6-privacy/]. To get the public
one:
ip -o addr | grep 'global' | grep -v temporary
Re: IPv6 tunnels [was: Re: ISP with native ipv6 in isarael]
On 26/01/2016 17:04, Tzafrir Cohen wrote: > On Tue, Jan 12, 2016 at 03:57:01PM +0200, Evgeniy Ginzburg wrote: > >> Hi all. Do we have one or two?? Want to get rid of NAT (partially). > > Off-topic, but I saw the following error today in my mail log: > > dsn=5.7.1, status=bounced (host aspmx.l.google.com[2a00:1450:4013:c01::1a] > said: > 550-5.7.1 [2001:0::::::] Our system has detected that > this 550-5.7.1 message does not meet IPv6 sending guidelines regard ing PTR > records > 550-5.7.1 and authentication. Please review > 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_error [1] > for more > 550 5.7.1 information. > > Looking further I noticed that I installed the package miredo and forgot > about it. Perhaps I should set up a server somewhere and link my clients > to it. Some of my requests to gmail go through it. > > And on the same note: SoftLayer still doesn't provide IPV6 addresses. I disabled IPv6 on my mail server because I just couldn't get past this problem. Reverse lookup is fine. Domain has SPF that lists my server. Google still won't accept my emails. If you solve this, please let me know how. Shachar Links: -- [1] https://support.google.com/mail/?p=ipv6_authentication_error ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
IPv6 tunnels [was: Re: ISP with native ipv6 in isarael]
On Tue, Jan 12, 2016 at 03:57:01PM +0200, Evgeniy Ginzburg wrote: > Hi all. > Do we have one or two?? > Want to get rid of NAT (partially). Off-topic, but I saw the following error today in my mail log: dsn=5.7.1, status=bounced (host aspmx.l.google.com[2a00:1450:4013:c01::1a] said: 550-5.7.1 [2001:0::::::] Our system has detected that this 550-5.7.1 message does not meet IPv6 sending guidelines regard ing PTR records 550-5.7.1 and authentication. Please review 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_error for more 550 5.7.1 information. Looking further I noticed that I installed the package miredo and forgot about it. Perhaps I should set up a server somewhere and link my clients to it. Some of my requests to gmail go through it. And on the same note: SoftLayer still doesn't provide IPV6 addresses. -- Tzafrir Cohen | tzaf...@jabber.org | VIM is http://tzafrir.org.il || a Mutt's tzaf...@cohens.org.il || best tzaf...@debian.org|| friend ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
Thank you for another valuable piece of information. BR, Evgeniy. On Wed, Jan 13, 2016 at 7:52 PM, E.S. Rosenberg <esr+linux...@g.jct.ac.il> wrote: > Triple C may also support IPv6, when they started I used them, my > experience with them was very positive. > Very knowledgeable support people etc. > The only reason I'm not with them still is that the other people who > use the link demanded Rimon for their filtering prowess. > HTH, > Eliyahu - אליהו > > 2016-01-12 19:18 GMT+02:00 Shachar Shemesh <shac...@shemesh.biz>: > > On 12/01/16 18:05, Evgeniy Ginzburg wrote: > > > > Thank you. Will try. > > > > I did try. > > > > On the plus side: They give you a real address. In fact, they give you > 2^64 > > real addresses. Bear in mind, however, that they do not give you a fixed > > address. You will get a different address range every time you connect. > When > > I asked, a fixed IPv6 address range costed as much as a fixed IPv4, which > > makes zero sense, but there you have it. > > > > To my surprise, this worked rather well. Whenever the router (I was using > > openwrt) reconnected, it somehow managed to provoke all the clients to > get a > > new address. The clients did not give up the old addresses, so > connections > > inside the network were not disconnected due to this change. I guess this > > means you cannot connect P2P to another client that resides on an address > > you have ever owned, but that seems a minor problem. > > > > Down sides: > > You are still going to be using NAT. Since the IPv6 support in Israel is > > virtually non-existent, which means you will be using your IPv4 address > > quite a lot. You only get one of those. > > > > I hope you realize that having NAT means that outside elements don't know > > which precise machine inside your network they are talking to. It seems, > > from your question, that you consider this a good thing, but I wanted to > > make sure you are aware of it. > > > > Their supports leaves something to be desired. Very long waiting times, > it > > may take them 48 hours to call you back if you decide not to wait, and > most > > of their technicians don't know how to configure IPv6. Some don't even > know > > it exists. I will qualify this point by saying I was their customer, > > briefly, soon after their launch. It is possible this point has, since, > > improved. > > > > In the end, when an upgrade to 40Mb/s left me without internet for a week > > pending a (failed) attempt to diagnose it, including an X-Fone technician > > sending me to the modem's maker to get a firmware upgrade he said might > > help, and that maker brushing me off (it was the modem they were > subsidizing > > for me, so I did hold them partially responsible), I decided that enough > was > > enough, and went to Nezeq for a few months. I'm now on Cellcom triple. > > > > It is also worth noting that on Cellcom triple, the technician is > mandatory > > (and costs around 300nis). He had to work quite hard to get their modem > to > > sync in VDSL, going to the floor Bezeq switch several times. After he > left, > > I connected my modem and it synced, so it's obvious that the problem was, > > indeed, a physical problem with my house's infrastructure. Still, a week > > without internet is too long. > > > > Bottom line, now that I know VDSL works, I might give them another go, > once > > they offer a phone as well. For the time being, I'm happy with where I am > > (I've only moved a week ago). > > > > Shachar > > > > On Jan 12, 2016 15:59, "Yuval Adam" <yu...@y3xz.com> wrote: > >> > >> 018 Xphone > >> AFAIK they are the only ISP that supports native ipv6 on non-commercial > >> uplinks > >> > >> > >> On 01/12/2016 03:57 PM, Evgeniy Ginzburg wrote: > >> > Hi all. > >> > Do we have one or two?? > >> > Want to get rid of NAT (partially). > >> > > >> > BR, Evgeniy. > >> > > >> > -- > >> > So long, and thanks for all the fish. > >> > > >> > > >> > ___ > >> > Linux-il mailing list > >> > Linux-il@cs.huji.ac.il > >> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > >> > > >> > >> ___ > >> Linux-il mailing list > >> Linux-il@cs.huji.ac.il > >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > > > > > ___ > > Linux-il mailing list > > Linux-il@cs.huji.ac.il > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > > > > > ___ > > Linux-il mailing list > > Linux-il@cs.huji.ac.il > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > -- So long, and thanks for all the fish. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
Triple C may also support IPv6, when they started I used them, my experience with them was very positive. Very knowledgeable support people etc. The only reason I'm not with them still is that the other people who use the link demanded Rimon for their filtering prowess. HTH, Eliyahu - אליהו 2016-01-12 19:18 GMT+02:00 Shachar Shemesh <shac...@shemesh.biz>: > On 12/01/16 18:05, Evgeniy Ginzburg wrote: > > Thank you. Will try. > > I did try. > > On the plus side: They give you a real address. In fact, they give you 2^64 > real addresses. Bear in mind, however, that they do not give you a fixed > address. You will get a different address range every time you connect. When > I asked, a fixed IPv6 address range costed as much as a fixed IPv4, which > makes zero sense, but there you have it. > > To my surprise, this worked rather well. Whenever the router (I was using > openwrt) reconnected, it somehow managed to provoke all the clients to get a > new address. The clients did not give up the old addresses, so connections > inside the network were not disconnected due to this change. I guess this > means you cannot connect P2P to another client that resides on an address > you have ever owned, but that seems a minor problem. > > Down sides: > You are still going to be using NAT. Since the IPv6 support in Israel is > virtually non-existent, which means you will be using your IPv4 address > quite a lot. You only get one of those. > > I hope you realize that having NAT means that outside elements don't know > which precise machine inside your network they are talking to. It seems, > from your question, that you consider this a good thing, but I wanted to > make sure you are aware of it. > > Their supports leaves something to be desired. Very long waiting times, it > may take them 48 hours to call you back if you decide not to wait, and most > of their technicians don't know how to configure IPv6. Some don't even know > it exists. I will qualify this point by saying I was their customer, > briefly, soon after their launch. It is possible this point has, since, > improved. > > In the end, when an upgrade to 40Mb/s left me without internet for a week > pending a (failed) attempt to diagnose it, including an X-Fone technician > sending me to the modem's maker to get a firmware upgrade he said might > help, and that maker brushing me off (it was the modem they were subsidizing > for me, so I did hold them partially responsible), I decided that enough was > enough, and went to Nezeq for a few months. I'm now on Cellcom triple. > > It is also worth noting that on Cellcom triple, the technician is mandatory > (and costs around 300nis). He had to work quite hard to get their modem to > sync in VDSL, going to the floor Bezeq switch several times. After he left, > I connected my modem and it synced, so it's obvious that the problem was, > indeed, a physical problem with my house's infrastructure. Still, a week > without internet is too long. > > Bottom line, now that I know VDSL works, I might give them another go, once > they offer a phone as well. For the time being, I'm happy with where I am > (I've only moved a week ago). > > Shachar > > On Jan 12, 2016 15:59, "Yuval Adam" <yu...@y3xz.com> wrote: >> >> 018 Xphone >> AFAIK they are the only ISP that supports native ipv6 on non-commercial >> uplinks >> >> >> On 01/12/2016 03:57 PM, Evgeniy Ginzburg wrote: >> > Hi all. >> > Do we have one or two?? >> > Want to get rid of NAT (partially). >> > >> > BR, Evgeniy. >> > >> > -- >> > So long, and thanks for all the fish. >> > >> > >> > ___ >> > Linux-il mailing list >> > Linux-il@cs.huji.ac.il >> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il >> > >> >> ___ >> Linux-il mailing list >> Linux-il@cs.huji.ac.il >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
ISP with native ipv6 in isarael
Hi all. Do we have one or two?? Want to get rid of NAT (partially). BR, Evgeniy. -- So long, and thanks for all the fish. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
018 Xphone AFAIK they are the only ISP that supports native ipv6 on non-commercial uplinks On 01/12/2016 03:57 PM, Evgeniy Ginzburg wrote: > Hi all. > Do we have one or two?? > Want to get rid of NAT (partially). > > BR, Evgeniy. > > -- > So long, and thanks for all the fish. > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
Thank you. Will try. On Jan 12, 2016 15:59, "Yuval Adam" <yu...@y3xz.com> wrote: > 018 Xphone > AFAIK they are the only ISP that supports native ipv6 on non-commercial > uplinks > > > On 01/12/2016 03:57 PM, Evgeniy Ginzburg wrote: > > Hi all. > > Do we have one or two?? > > Want to get rid of NAT (partially). > > > > BR, Evgeniy. > > > > -- > > So long, and thanks for all the fish. > > > > > > ___ > > Linux-il mailing list > > Linux-il@cs.huji.ac.il > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ISP with native ipv6 in isarael
On 12/01/16 18:05, Evgeniy Ginzburg wrote: > > Thank you. Will try. > I did try. On the plus side: They give you a real address. In fact, they give you 2^64 real addresses. Bear in mind, however, that they do not give you a fixed address. You will get a different address range every time you connect. When I asked, a fixed IPv6 address range costed as much as a fixed IPv4, which makes zero sense, but there you have it. To my surprise, this worked rather well. Whenever the router (I was using openwrt) reconnected, it somehow managed to provoke all the clients to get a new address. The clients did not give up the old addresses, so connections inside the network were not disconnected due to this change. I guess this means you cannot connect P2P to another client that resides on an address you have ever owned, but that seems a minor problem. Down sides: You are still going to be using NAT. Since the IPv6 support in Israel is virtually non-existent, which means you will be using your IPv4 address quite a lot. You only get one of those. I hope you realize that having NAT means that outside elements don't know which precise machine inside your network they are talking to. It seems, from your question, that you consider this a good thing, but I wanted to make sure you are aware of it. Their supports leaves something to be desired. Very long waiting times, it may take them 48 hours to call you back if you decide not to wait, and most of their technicians don't know how to configure IPv6. Some don't even know it exists. I will qualify this point by saying I was their customer, briefly, soon after their launch. It is possible this point has, since, improved. In the end, when an upgrade to 40Mb/s left me without internet for a week pending a (failed) attempt to diagnose it, including an X-Fone technician sending me to the modem's maker to get a firmware upgrade he said might help, and that maker brushing me off (it was the modem they were subsidizing for me, so I did hold them partially responsible), I decided that enough was enough, and went to Nezeq for a few months. I'm now on Cellcom triple. It is also worth noting that on Cellcom triple, the technician is mandatory (and costs around 300nis). He had to work quite hard to get their modem to sync in VDSL, going to the floor Bezeq switch several times. After he left, I connected my modem and it synced, so it's obvious that the problem was, indeed, a physical problem with my house's infrastructure. Still, a week without internet is too long. Bottom line, now that I know VDSL works, I might give them another go, once they offer a phone as well. For the time being, I'm happy with where I am (I've only moved a week ago). Shachar > On Jan 12, 2016 15:59, "Yuval Adam" <yu...@y3xz.com > <mailto:yu...@y3xz.com>> wrote: > > 018 Xphone > AFAIK they are the only ISP that supports native ipv6 on > non-commercial > uplinks > > > On 01/12/2016 03:57 PM, Evgeniy Ginzburg wrote: > > Hi all. > > Do we have one or two?? > > Want to get rid of NAT (partially). > > > > BR, Evgeniy. > > > > -- > > So long, and thanks for all the fish. > > > > > > ___ > > Linux-il mailing list > > Linux-il@cs.huji.ac.il <mailto:Linux-il@cs.huji.ac.il> > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il <mailto:Linux-il@cs.huji.ac.il> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il > > > > ___ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: Should I switch my home to IPv6?
2014-10-20 10:23 GMT+03:00 Shachar Shemesh shac...@shemesh.biz: I am shopping around for a new ISP. Exaphone are offering a reasonable deal, with an option to connect using IPv6. Sadly, their fixed IP costs are astronomical even with IPv6, without any justification I can see. Because we can and Because it's very profitable to charge you a lot for something that costs us almost nothing and Because instead of re-evaluating IPv4 policies in IPv6, if I can charge you and you will pay then I will do so (those are just some examples of corporate thinking) The question is: should I? Do standard linksys routers support IPv6? Will I be able to get any level of bittorrent bandwidth with my IP unreachable to other peers running IPv4? Any router that supports decent firmware will support IPv6 (either through the native formware or through openwrt etc) You will still have to have an IPv4 tunnel, either provided by your at home router (most likely/best scenario) or at your ISP unless you want to disconnect from 90% of the known internet (yes the major sites are on IPv6 so if you limit yourself to google/facebook/amazon etc you can probably stay in the IPv6 only zone...). If you have the IPv4 tunnel it should be fairly transparent to you since you will just be connected to both IPv4 and IPv6. I was not aware that any ISP in Israel had started to offer IPv6 service... maybe you can cajole them into a better rate by telling them you are basically a beta-tester for their new service... Regards, Eliyahu - אליהו What do you say? Shachar ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Should I switch my home to IPv6?
I am shopping around for a new ISP. Exaphone are offering a reasonable deal, with an option to connect using IPv6. Sadly, their fixed IP costs are astronomical even with IPv6, without any justification I can see. The question is: should I? Do standard linksys routers support IPv6? Will I be able to get any level of bittorrent bandwidth with my IP unreachable to other peers running IPv4? What do you say? Shachar ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: Looking for implementation of IPv6 options(RFC3542) on embedded
Shalom Rami, Hello Dear Linuxes, Does anybody get this mail and maybe had a though about the subject ? On 01/11/2012 07:49 AM, Lev Olshvang wrote: Hi list , I am working on embedded 2.6.39 platform with a uclibc 0.9.32. It turns out that neither uclibc, nor newlib implements IPv6 option management (RFC3542) , such as inet6_opt_init(), inet6_opt_append() functions. The newlib for example just provide include reference newlib-1.20.0/newlib/libc/sys/linux/include/netinet6/in6.h:extern int inet6_opt_append __P((void *, size_t, int, uint8_t ,) but how it is supposed to resolve external symbol ? ThanX, Lev ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: Looking for implementation of IPv6 options(RFC3542) on embedded
Hi. Mail on maillist, certainly. Seems that nobody knows about the topic much. Me either. But regarding embedded libraries take a look at http://eglibc.org, it promise source compatibility with GNU libc. So it may be in better shape ipv6-vise. Regard, Evgeniy. On Jan 12, 2012 8:17 AM, Lev Olshvang lols...@012.net.il wrote: Shalom Rami, Hello Dear Linuxes, Does anybody get this mail and maybe had a though about the subject ? On 01/11/2012 07:49 AM, Lev Olshvang wrote: Hi list , I am working on embedded 2.6.39 platform with a uclibc 0.9.32. It turns out that neither uclibc, nor newlib implements IPv6 option management (RFC3542) , such as inet6_opt_init(), inet6_opt_append() functions. The newlib for example just provide include reference newlib-1.20.0/newlib/libc/sys/**linux/include/netinet6/in6.h:**extern int inet6_opt_append __P((void *, size_t, int, uint8_t ,) but how it is supposed to resolve external symbol ? ThanX, Lev __**_ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/**mailman/listinfo/linux-ilhttp://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Looking for implementation of IPv6 option management (RFC3542) on embedded
Hi list , I am working on embedded 2.6.39 platform with a uclibc 0.9.32. It turns out that neither uclibc, nor newlib implements IPv6 option management (RFC3542) , such as inet6_opt_init(), inet6_opt_append() functions. The newlib for example just provide include reference newlib-1.20.0/newlib/libc/sys/linux/include/netinet6/in6.h:extern int inet6_opt_append __P((void *, size_t, int, uint8_t ,) but how it is supposed to resolve external symbol ? ThanX, Lev ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
Here is what looks like a good source to track the progress of ipv6 daily: http://bgp.he.net/ipv6-progress-report.cgi Sent from my phone. Please excuse my brevity. On 06/02/2011 3:19 AM, Maxim Veksler ma...@vekslers.org wrote: On Fri, Feb 4, 2011 at 10:33 AM, geoffrey mendelson geoffreymendel...@gmail.com wrote: On Feb 4, 2011, at 10:09 AM, Uri Even-Chen wrote: I have websites and domain names, but currently I think they work with IPv4 and not IPv6. Will they change them to IPv6? Will I have to change DNS settings for my domain names? And when will this happen? Possibly never, but at least for a long time. The current DNS system is IPv4 only, but serves both IPv4 and IPv6. If you have your DNS set up to include IPv6, the information will be available, but the client needs to be able to interpet it. Since BIND is open source software, nothing is preventing you or anyone else from adding IPv6 support to it. Eventually someone will do it, and 100% IPv6 networks will become possible. To clarify some misconceptions: Bind IPv6 is in working condition. Further more, it is production ready as demonstrated by this article http://www.debian-administration.org/article/655/Running_IPv6_in_practice ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 10:33 AM, geoffrey mendelson geoffreymendel...@gmail.com wrote: On Feb 4, 2011, at 10:09 AM, Uri Even-Chen wrote: I have websites and domain names, but currently I think they work with IPv4 and not IPv6. Will they change them to IPv6? Will I have to change DNS settings for my domain names? And when will this happen? Possibly never, but at least for a long time. The current DNS system is IPv4 only, but serves both IPv4 and IPv6. If you have your DNS set up to include IPv6, the information will be available, but the client needs to be able to interpet it. Since BIND is open source software, nothing is preventing you or anyone else from adding IPv6 support to it. Eventually someone will do it, and 100% IPv6 networks will become possible. To clarify some misconceptions: Bind IPv6 is in working condition. Further more, it is production ready as demonstrated by this article http://www.debian-administration.org/article/655/Running_IPv6_in_practice ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
IPv6
Hi everyone, I read Google's tweet IPv6 marks the next chapter in the history of the Internet [http://googleblog.blogspot.com/2011/02/ipv6-marks-next-chapter-in-history-of.html], and I would like to know what are the consequences of IPv6. I have websites and domain names, but currently I think they work with IPv4 and not IPv6. Will they change them to IPv6? Will I have to change DNS settings for my domain names? And when will this happen? What happens to people whos systems don't support IPv6? Will they not be able to view IPv6 websites or send/receive email from IPv6 users? Or is it backwards compatible with IPv4? Will the DNS system all change to IPv6? Best regards, Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 10:09 AM, Uri Even-Chen u...@speedy.net wrote: Hi everyone, I read Google's tweet IPv6 marks the next chapter in the history of the Internet [ http://googleblog.blogspot.com/2011/02/ipv6-marks-next-chapter-in-history-of.html ], and I would like to know what are the consequences of IPv6. I have websites and domain names, but currently I think they work with IPv4 and not IPv6. Will they change them to IPv6? Will I have to change DNS settings for my domain names? And when will this happen? What happens to people whos systems don't support IPv6? Will they not be able to view IPv6 websites or send/receive email from IPv6 users? Or is it backwards compatible with IPv4? Will the DNS system all change to IPv6? You should see this lecture: [1/4] http://www.youtube.com/watch?v=2clTKh2vFAE [2/4] http://www.youtube.com/watch?v=S3i4RRubCvI [3/4] http://www.youtube.com/watch?v=0L_9aehQQig [4/4] http://www.youtube.com/watch?v=shmt9U4-rTI -- Shimi ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Feb 4, 2011, at 10:09 AM, Uri Even-Chen wrote: I have websites and domain names, but currently I think they work with IPv4 and not IPv6. Will they change them to IPv6? Will I have to change DNS settings for my domain names? And when will this happen? Possibly never, but at least for a long time. The current DNS system is IPv4 only, but serves both IPv4 and IPv6. If you have your DNS set up to include IPv6, the information will be available, but the client needs to be able to interpet it. Since BIND is open source software, nothing is preventing you or anyone else from adding IPv6 support to it. Eventually someone will do it, and 100% IPv6 networks will become possible. Will IPv4 support ever be dropped from BIND? Sure, some day. But as the old saying goes, don't hold your breath. After all Windows 7 still runs 8088 PC DOS programs. Not because Microsoft wants to maintain compatibility with 30 year old programs, but because customers pay for it. On the other hand, 99% of all internet uses have no idea what is on the other side of their router. You could replace IP with something completely different and as long as their routers still work, no one would ever notice. In fact, it pretty much is here in Israel, You run IPv4, HOT runs DOCISS and BEZEQ ATM. Your IPv4 (or IPv6 if you had it) packets go into the router, and come out somewhere else, but they get there via a different protocol. What happens to people whos systems don't support IPv6? Will they not be able to view IPv6 websites or send/receive email from IPv6 users? Or is it backwards compatible with IPv4? Will the DNS system all change to IPv6? My guess is that no one will convert their website to 100% IPv6 for many years to come, unless they don't really care about older users. For example, I mentioned PC DOS programs, and while Microsoft supports them, I doubt there is a YouTube plan to support them. As time goes on, many sites will just stop caring if a person with a ten year old PC and an obsolete network technology access them. Those people are not going to buy new cars or this week's newest cell phone, eat in $100 a person restaurants, or pay to watch HDTV (whatever it is by then). They will pay for low res (in comparison) sports, or order pizzas, so those sites will have IMHO IPv4 compatibility for a long time. Geoff. -- Geoffrey S. Mendelson, N3OWJ/4X1GM Those who cannot remember the past are condemned to misquote it. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 10:15, shimi linux...@shimi.net wrote: You should see this lecture: [1/4] http://www.youtube.com/watch?v=2clTKh2vFAE [2/4] http://www.youtube.com/watch?v=S3i4RRubCvI [3/4] http://www.youtube.com/watch?v=0L_9aehQQig [4/4] http://www.youtube.com/watch?v=shmt9U4-rTI Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. http://ipv6.google.com/ doesn't work for me. So I guess it's too early to enable my websites with IPv6. By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 11:30 AM, Uri Even-Chen u...@speedy.net wrote: On Fri, Feb 4, 2011 at 10:15, shimi linux...@shimi.net wrote: You should see this lecture: [1/4] http://www.youtube.com/watch?v=2clTKh2vFAE [2/4] http://www.youtube.com/watch?v=S3i4RRubCvI [3/4] http://www.youtube.com/watch?v=0L_9aehQQig [4/4] http://www.youtube.com/watch?v=shmt9U4-rTI Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. http://ipv6.google.com/ doesn't work for me. So I guess it's too early to enable my websites with IPv6. Do you have IPv6 connectivity on your machine? If not, how do you expect to open a session between you and them? (this was explained in the lecture...) (Do you want IPv6 connectivity and don't want to wait until Israeli ISPs wake up? See http://ipv6.he.net ) By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? Why not? An IP is an IP... Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). I believe it will still be the choice of the providers. There's no technical reason not to assign any customer a static prefix with many IPs... as there would be enough for everybody, and they won't have an excuse on that one anymore. Of course, there's always the monetary reason (why not make money off our customers, selling them a $0/mo. worth service at $10/mo. price?) -- Shimi ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
Hi Uri,
On Fri, Feb 04, 2011 at 11:30:52AM +0200, Uri Even-Chen wrote:
On Fri, Feb 4, 2011 at 10:15, shimi linux...@shimi.net wrote:
By the way, I wonder what Wikipedia will do with IPv6 addresses? Will
they do the same they are doing with IPv4 (save the IP of the user who
edited pages)?
See http://wikitech.wikimedia.org/view/IPv6_deployment.
baruch
--
~. .~ Tk Open Systems
=}ooO--U--Ooo{=
- bar...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 11:48, shimi linux...@shimi.net wrote: On Fri, Feb 4, 2011 at 11:30 AM, Uri Even-Chen u...@speedy.net wrote: On Fri, Feb 4, 2011 at 10:15, shimi linux...@shimi.net wrote: You should see this lecture: [1/4] http://www.youtube.com/watch?v=2clTKh2vFAE [2/4] http://www.youtube.com/watch?v=S3i4RRubCvI [3/4] http://www.youtube.com/watch?v=0L_9aehQQig [4/4] http://www.youtube.com/watch?v=shmt9U4-rTI Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. http://ipv6.google.com/ doesn't work for me. So I guess it's too early to enable my websites with IPv6. Do you have IPv6 connectivity on your machine? If not, how do you expect to open a session between you and them? (this was explained in the lecture...) (Do you want IPv6 connectivity and don't want to wait until Israeli ISPs wake up? See http://ipv6.he.net ) Actually I don't care. I get the default IPv4 address from my ISP (bezeqint.net). As long as I can see the entire Internet, I don't care to use IPv4. My websites also work with IPv4. I think I will wait for my ISP and web hosting companies to switch to IPv6 when they want to (if they ever decide to do so). As long as Google, Twitter, Facebook and Wikipedia are not using IPv6, I don't see any reason to use it. By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? Why not? An IP is an IP... Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). I believe it will still be the choice of the providers. There's no technical reason not to assign any customer a static prefix with many IPs... as there would be enough for everybody, and they won't have an excuse on that one anymore. Of course, there's always the monetary reason (why not make money off our customers, selling them a $0/mo. worth service at $10/mo. price?) I don't like permament IP addresses. Sometimes I prefer to remain anonymous, and with a permanent IP address a website can recognize me with previous actions (without cookies). For example Wikipedia. I also don't want people to recognize my IP address and actions on Wikipedia (when I didn't use an account). I guess that with IPv6 it will be easier to remain anonymous. Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
Hi, IPv6 is an old protocol (~15 years) and is very much needed to allow the internet growth but not all the services are IPv6 ready. Pinging between hosts does not mean that IPv6 is supported. The Linux kernel and many of the utilities support IPv6 as well as windows but there are services that in the past were not prepared e.g RPC which prevented the user to perform nfs mount easily (there other alternatives). The end user should not be aware as it is like plumbing and electricity, but several new services will be allowed as better transition between networks and direct device access (e.g for smart home) since the minimal network address has 64-bit for hosts which allows ()^2 number of hosts compared to the _total_ space in IPv4. Working in mixed environment of v4 and v6 is possible in more than one mode depending on the needs like tunnel, translation, etc. This issue will be very labour demanding when transition would be made. AFAIK the main sites (e.g google) do support IPv6 but as stated before some of the services might not be functional . Eddie On 4 בפבר 2011, at 12:13, Uri Even-Chen u...@speedy.net wrote: On Fri, Feb 4, 2011 at 11:48, shimi linux...@shimi.net wrote: On Fri, Feb 4, 2011 at 11:30 AM, Uri Even-Chen u...@speedy.net wrote: On Fri, Feb 4, 2011 at 10:15, shimi linux...@shimi.net wrote: You should see this lecture: [1/4] http://www.youtube.com/watch?v=2clTKh2vFAE [2/4] http://www.youtube.com/watch?v=S3i4RRubCvI [3/4] http://www.youtube.com/watch?v=0L_9aehQQig [4/4] http://www.youtube.com/watch?v=shmt9U4-rTI Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. http://ipv6.google.com/ doesn't work for me. So I guess it's too early to enable my websites with IPv6. Do you have IPv6 connectivity on your machine? If not, how do you expect to open a session between you and them? (this was explained in the lecture...) (Do you want IPv6 connectivity and don't want to wait until Israeli ISPs wake up? See http://ipv6.he.net ) Actually I don't care. I get the default IPv4 address from my ISP (bezeqint.net). As long as I can see the entire Internet, I don't care to use IPv4. My websites also work with IPv4. I think I will wait for my ISP and web hosting companies to switch to IPv6 when they want to (if they ever decide to do so). As long as Google, Twitter, Facebook and Wikipedia are not using IPv6, I don't see any reason to use it. By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? Why not? An IP is an IP... Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). I believe it will still be the choice of the providers. There's no technical reason not to assign any customer a static prefix with many IPs... as there would be enough for everybody, and they won't have an excuse on that one anymore. Of course, there's always the monetary reason (why not make money off our customers, selling them a $0/mo. worth service at $10/mo. price?) I don't like permament IP addresses. Sometimes I prefer to remain anonymous, and with a permanent IP address a website can recognize me with previous actions (without cookies). For example Wikipedia. I also don't want people to recognize my IP address and actions on Wikipedia (when I didn't use an account). I guess that with IPv6 it will be easier to remain anonymous. Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, 4 Feb 2011, Uri Even-Chen wrote: Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. This appears to be the case. http://ipv6.google.com/ doesn't work for me. Well it only has an IPv6 address, so it won't if you don't have IPv6 capability. $ host ipv6.google.com ipv6.google.com is an alias for ipv6.l.google.com. ipv6.l.google.com has IPv6 address 2a00:1450:8006::63 So I guess it's too early to enable my websites with IPv6. It's not an either/or thing. You can have both IPv6 and IPv4 addresses on the same host. $ host ipv6.he.net ipv6.he.net has address 66.220.2.75 ipv6.he.net has IPv6 address 2001:470:0:64::2 Anyway, your hosting provider would need to support IPv6 to some extent before you could do this. By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? I don't see why this would change. Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). This would be up to yoru ISP, though it would be easier for them to allocate static addresses and even blocks of addresses so that internal hosts can have their own address. But relying on a dynamic IP address for anonymity is not the best strategy. ISPs can be forced to reveal the identity of a person using a particular IP address at a given time. There are other methods like anonymous proxies etc which can more effectively help you hide your identity, though if you've got nothing to hide then I wouldn't bother. Geoff. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 15:13, Geoff Shang ge...@quitelikely.com wrote: On Fri, 4 Feb 2011, Uri Even-Chen wrote: Thanks for the links, I listened to the entire lecture. I understand that Google and Facebook still haven't enabled IPv6 on their main websites. This appears to be the case. http://ipv6.google.com/ doesn't work for me. Well it only has an IPv6 address, so it won't if you don't have IPv6 capability. $ host ipv6.google.com ipv6.google.com is an alias for ipv6.l.google.com. ipv6.l.google.com has IPv6 address 2a00:1450:8006::63 So I guess it's too early to enable my websites with IPv6. It's not an either/or thing. You can have both IPv6 and IPv4 addresses on the same host. $ host ipv6.he.net ipv6.he.net has address 66.220.2.75 ipv6.he.net has IPv6 address 2001:470:0:64::2 Anyway, your hosting provider would need to support IPv6 to some extent before you could do this. I will wait until Google, Facebook, Twitter and Wikipedia will do it, and then I will start worrying about it. Or when my web hosting providers and ISPs will do it for me (I have more than one hosting provider and ISP - for more than one website; connecting at home, work etc.) By the way, I wonder what Wikipedia will do with IPv6 addresses? Will they do the same they are doing with IPv4 (save the IP of the user who edited pages)? I don't see why this would change. Will an IPv6 address be permanent for end users, or will it change every day? (I think my IP address at home is not permanent). This would be up to yoru ISP, though it would be easier for them to allocate static addresses and even blocks of addresses so that internal hosts can have their own address. But relying on a dynamic IP address for anonymity is not the best strategy. ISPs can be forced to reveal the identity of a person using a particular IP address at a given time. There are other methods like anonymous proxies etc which can more effectively help you hide your identity, though if you've got nothing to hide then I wouldn't bother. Geoff. Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, 4 Feb 2011, geoffrey mendelson wrote: Possibly never, but at least for a long time. The current DNS system is IPv4 only, but serves both IPv4 and IPv6. If you have your DNS set up to include IPv6, the information will be available, but the client needs to be able to interpet it. Some root-servers now have IPv6 addresses. Until I started writing this, I was under the impression that all did, but according to ftp://ftp.internic.net/domain/named.root (which is the authoritative source for the root-servers list), only A.ROOT-SERVERS.NET, F.ROOT-SERVERS.NET, H.ROOT-SERVERS.NET, I.ROOT-SERVERS.NET, J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET, L.ROOT-SERVERS.NET and M.ROOT-SERVERS.NET have IPv6 addresses. Since BIND is open source software, nothing is preventing you or anyone else from adding IPv6 support to it. Eventually someone will do it, and 100% IPv6 networks will become possible. Are you saying that Bind cannot connect to DNS root-servers over IPv6? What other functionality is it missing? Certainly we run a virtual server on an IPv6 connection that also runs an authoritative DNS server for those domains and we've experienced no problems. I'll be the first to admit that I'm not fully up on IPv6 stuff. Geoff. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6
On Fri, Feb 4, 2011 at 15:31, Geoff Shang ge...@quitelikely.com wrote: On Fri, 4 Feb 2011, geoffrey mendelson wrote: Possibly never, but at least for a long time. The current DNS system is IPv4 only, but serves both IPv4 and IPv6. If you have your DNS set up to include IPv6, the information will be available, but the client needs to be able to interpet it. Some root-servers now have IPv6 addresses. Until I started writing this, I was under the impression that all did, but according to ftp://ftp.internic.net/domain/named.root (which is the authoritative source for the root-servers list), only A.ROOT-SERVERS.NET, F.ROOT-SERVERS.NET, H.ROOT-SERVERS.NET, I.ROOT-SERVERS.NET, J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET, L.ROOT-SERVERS.NET and M.ROOT-SERVERS.NET have IPv6 addresses. Only 2 out of the 13 .net and .com main name servers have IPv6 addresses, although I guess for today that's enough. I checked and all .org and .info name servers have IPv6 addresses. For .il only 2 name servers have IPv6 addresses. For .eg only 1 (out of 3) name server has an IPv6 address. http://www.iana.org/domains/root/db/ http://www.iana.org/domains/root/db/net.html http://www.iana.org/domains/root/db/com.html http://www.iana.org/domains/root/db/org.html http://www.iana.org/domains/root/db/info.html All the major ISPs in Israel's name servers don't have IPv6 addresses. Some of my hosting provider (servage.net)'s name servers have IPv6 addresses. I think they don't define IPv6 addresses to all the name servers, because some users will not work when IPv6 addresses are defined - and they can query only servers who don't have any IPv6 address defined. Since BIND is open source software, nothing is preventing you or anyone else from adding IPv6 support to it. Eventually someone will do it, and 100% IPv6 networks will become possible. Are you saying that Bind cannot connect to DNS root-servers over IPv6? What other functionality is it missing? Certainly we run a virtual server on an IPv6 connection that also runs an authoritative DNS server for those domains and we've experienced no problems. I think BIND comes with a default root servers list, and this list is IPv4. Then if you work only with IPv4, you will not have any root server defined. But I'm not sure, last time I checked was a long time ago. By the way, I noticed a problem with one of the .il name servers - ns-il.ripe.net [193.0.12.108] returns the other .il name servers and not the domain's name servers - for example [http://www.dnsstuff.com/tools/legacy/?formaction=DNSLOOKUPToolFormName=customlookupname=walla.co.ilr=235660detail=0type=MX] (press Click Here). Do you know why they added this name server to the list of .il name servers? DNS server handling your query: ns-il.ripe.net. DNS server's address: 193.0.12.108#53 Non-authoritative answer: *** Can't find walla.co.il: No answer Authoritative answers can be found from: co.il nameserver = nsb.ns.il. co.il nameserver = nse.ns.il. co.il nameserver = sns-pb.isc.org. co.il nameserver = nsd.ns.il. co.il nameserver = dns8.denic.de. co.il nameserver = ildns.huji.ac.il. co.il nameserver = lookup.iucc.ac.il. nsb.ns.il internet address = 192.115.210.60 nsd.ns.il internet address = 149.20.56.132 nsd.ns.il has address 2001:4f8:3:37::11 nse.ns.il internet address = 192.115.141.253 ildns.huji.ac.il internet address = 128.139.6.66 lookup.iucc.ac.il internet address = 128.139.34.240 By the way, why do 012 smile (Internet Zahav) and Netvision have only 2 name servers? Is it enough? Do their DNS servers never fail? Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Website: http://www.speedy.net/ ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPV6?
On Wed, 2 Feb 2011, Yedidyah Bar-David wrote: Not sure about the status for Israeli ISPs, but at least one is registered at ISOC-IL's IIX as peering also IPv6: http://isoc.org.il/iix/2x_list.html Very interesting on a number of levels. I don't recall seeing anything about IPv6 in either of the Bezeq ADSL modem/routers we've had, is it hiding somewhere or do they still not support it yet? Geoff. ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
IPV6?
Hi, I'm planning to roll out at my hosting business a special package of virtual machine with IPV6 for people and companies who would like to deploy their web site for people who want to use IPV6. (so far the adoption of IPV6 in Israel sucks, even my upstream provider [Netvision] don't offer it). I would like to ask: does anyone knows which ISP here has dial-up plans with IPV6? (if I'll find that there isn't such a thing, perhaps I'll set up something, although this take some considerable investment) Thanks, Hetz ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPV6?
On Wed, Feb 02, 2011 at 10:35:14AM +0200, Hetz Ben Hamo wrote: Hi, I'm planning to roll out at my hosting business a special package of virtual machine with IPV6 for people and companies who would like to deploy their web site for people who want to use IPV6. (so far the adoption of IPV6 in Israel sucks, even my upstream provider [Netvision] don't offer it). Not sure about the status for Israeli ISPs, but at least one is registered at ISOC-IL's IIX as peering also IPv6: http://isoc.org.il/iix/2x_list.html I would like to ask: does anyone knows which ISP here has dial-up plans with IPV6? (if I'll find that there isn't such a thing, perhaps I'll set up something, although this take some considerable investment) You might consider using some tunneling service. There are a few that provide some service for free. I personally did a small test with Hurricane Electric, see http://tunnelbroker.net/ which worked well enough for the test - allowed me to run a client and a server and connect to it. I did not measure bandwidth/latency. Do you mean phone line dial-up when you refer to dial-up plans? A 56Kbit line? I guess most if not all tunnel brokers will give you more than that. -- Didi ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPV6?
On Wed, Feb 02, 2011 at 10:35:14AM +0200, Hetz Ben Hamo wrote: Hi, I'm planning to roll out at my hosting business a special package of virtual machine with IPV6 for people and companies who would like to deploy their web site for people who want to use IPV6. (so far the adoption of IPV6 in Israel sucks, even my upstream provider [Netvision] don't offer it). I would like to ask: does anyone knows which ISP here has dial-up plans with IPV6? (if I'll find that there isn't such a thing, perhaps I'll set up something, although this take some considerable investment) OT: so I suspect there would be some demand for a 6to4 gateway (as a simple router). Anybody wants to try and sell one? Background (in case you haven't heard it yet): http://www.apnic.net/publications/news/2011/delegation -- Tzafrir Cohen | tzaf...@jabber.org | VIM is http://tzafrir.org.il || a Mutt's tzaf...@cohens.org.il || best tzaf...@debian.org|| friend ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: the cost of switching to IPv6?
On Fri, May 01, 2009 at 08:07:57AM +0300, Geoffrey Mendelson wrote: For the first year or two, you probably won't get to any sites outside of your ISP until IIX is upgraded and the other ISPs upgrade their networks and interconnections. IIX already supports v6: http://isoc.org.il/iix/2x_list.html -- Didi ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
RE: the cost of switching to IPv6?
-Original Message- From: linux-il-boun...@cs.huji.ac.il [mailto:linux-il-boun...@cs.huji.ac.il] On Behalf Of Geoffrey Mendelson Sent: Friday, May 01, 2009 8:08 AM To: Hetz Ben Hamo Cc: linux-il Subject: Re: the cost of switching to IPv6? On Fri, May 1, 2009 at 3:29 AM, Hetz Ben Hamo het...@gmail.com wrote: Hi, I know TCP/IP but I'm not an expert on this issue, so I want to ask about the following scenario: Neither am I, but here goes. According to an article in The Register (http://www.theregister.co.uk/2009/04/30/ipv4_depletion/), ARIN (the group that gives IP's) will make life a bit harder when companies would ask for additional IP's. ARIN are going nuts with power. They have been sending people who own number blocks email asking them to join without payment, but if you do you agree to pay for your number block (probably an inital and recurring fees) when they decide to start charging. If you don't agree they can't make you pay, but they are liable to start giving away the ranges of people who don't pay. So, I was wondering: I'm almost sure that by now, most of the big ISP's here in Israel have some IPV6 infrastructure and some IP's, but what would it take to migrate clients to IPV6? here are more specific questions: They probably don't. IPv6 costs more money to maintain and slows things down in a mixed environment. I found that things get faster here because I only have a local IPv6 infrastructure that is poorly supported, if I turn it off whenever possible. Considering my (and others recent experience with local ISPs, I would debate the existence of an IPv4 infrastructure at Israeli ISPs. 1. Can a translation from V4 to V6 can occur at the ISP level, removing the need to replace home routers/modems? No, it would be of no use. They would have to use some sort of IPv4 to IPv6 conversion on the fly in their routers which adds cost to maintain, run and support. Most of the web service providers only provide IPV4 connections anyway, and they and their ISP's would have to upgrade. Obviously they will someday, but I'm sure the big companies will try their best to avoid it. 2. If not, what would be required to be done by the end user/home user if his ISP will switch to V6? A new router with ISPv6 support and translation. Since 99% of the home users in Israel tunnel, they would have to change the tunneling software. Considering you can buy an IPv4 router with 80211.g Wifi for 130 NIS it will be a long time before an enhanced IPv6 router will come down to the price that everyone will pay for one. 3. If someone has a server at a hosting company, or he gets a static IP, does he/she needs to ask for another V6 IP? Yes, you need both. There is only one DNS system, so you won't have to change anything, just make sure your DNS provider supports IPv6 and you keep your IP addresses updated. Because of the way things work around here, I would expect that you will be able to get IPv6 service soon from your ISP. You will have to pay extra for the service (probably commerical rates at first), and get a new router. For the first year or two, you probably won't get to any sites outside of your ISP until IIX is upgraded and the other ISPs upgrade their networks and interconnections. The main factor is money, most companies, especially in these times won't spend money for new technology just because it is new technology, and I doubt that any ISP can justify IPv6 unless they can charge real costumers real money to do it. How much would you be willing to pay extra for IPv6? 100 NIS a month? 500? 1000? How many people you know would be willing to pay anything at all? Geoff. -- Geoffrey S. Mendelson N3OWJ/4X1GM Jerusalem, Israel ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
RE: the cost of switching to IPv6?
015 used to support ipv6 natively with no extra payment - But had no demand for this service. If there is a demand, contact me off list, and I will check what's the current status of the service. -Original Message- From: linux-il-boun...@cs.huji.ac.il [mailto:linux-il-boun...@cs.huji.ac.il] On Behalf Of Geoffrey Mendelson Sent: Friday, May 01, 2009 8:08 AM To: Hetz Ben Hamo Cc: linux-il Subject: Re: the cost of switching to IPv6? On Fri, May 1, 2009 at 3:29 AM, Hetz Ben Hamo het...@gmail.com wrote: Hi, I know TCP/IP but I'm not an expert on this issue, so I want to ask about the following scenario: Neither am I, but here goes. According to an article in The Register (http://www.theregister.co.uk/2009/04/30/ipv4_depletion/), ARIN (the group that gives IP's) will make life a bit harder when companies would ask for additional IP's. ARIN are going nuts with power. They have been sending people who own number blocks email asking them to join without payment, but if you do you agree to pay for your number block (probably an inital and recurring fees) when they decide to start charging. If you don't agree they can't make you pay, but they are liable to start giving away the ranges of people who don't pay. So, I was wondering: I'm almost sure that by now, most of the big ISP's here in Israel have some IPV6 infrastructure and some IP's, but what would it take to migrate clients to IPV6? here are more specific questions: They probably don't. IPv6 costs more money to maintain and slows things down in a mixed environment. I found that things get faster here because I only have a local IPv6 infrastructure that is poorly supported, if I turn it off whenever possible. Considering my (and others recent experience with local ISPs, I would debate the existence of an IPv4 infrastructure at Israeli ISPs. 1. Can a translation from V4 to V6 can occur at the ISP level, removing the need to replace home routers/modems? No, it would be of no use. They would have to use some sort of IPv4 to IPv6 conversion on the fly in their routers which adds cost to maintain, run and support. Most of the web service providers only provide IPV4 connections anyway, and they and their ISP's would have to upgrade. Obviously they will someday, but I'm sure the big companies will try their best to avoid it. 2. If not, what would be required to be done by the end user/home user if his ISP will switch to V6? A new router with ISPv6 support and translation. Since 99% of the home users in Israel tunnel, they would have to change the tunneling software. Considering you can buy an IPv4 router with 80211.g Wifi for 130 NIS it will be a long time before an enhanced IPv6 router will come down to the price that everyone will pay for one. 3. If someone has a server at a hosting company, or he gets a static IP, does he/she needs to ask for another V6 IP? Yes, you need both. There is only one DNS system, so you won't have to change anything, just make sure your DNS provider supports IPv6 and you keep your IP addresses updated. Because of the way things work around here, I would expect that you will be able to get IPv6 service soon from your ISP. You will have to pay extra for the service (probably commerical rates at first), and get a new router. For the first year or two, you probably won't get to any sites outside of your ISP until IIX is upgraded and the other ISPs upgrade their networks and interconnections. The main factor is money, most companies, especially in these times won't spend money for new technology just because it is new technology, and I doubt that any ISP can justify IPv6 unless they can charge real costumers real money to do it. How much would you be willing to pay extra for IPv6? 100 NIS a month? 500? 1000? How many people you know would be willing to pay anything at all? Geoff. -- Geoffrey S. Mendelson N3OWJ/4X1GM Jerusalem, Israel ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
the cost of switching to IPv6?
Hi, I know TCP/IP but I'm not an expert on this issue, so I want to ask about the following scenario: According to an article in The Register (http://www.theregister.co.uk/2009/04/30/ipv4_depletion/), ARIN (the group that gives IP's) will make life a bit harder when companies would ask for additional IP's. So, I was wondering: I'm almost sure that by now, most of the big ISP's here in Israel have some IPV6 infrastructure and some IP's, but what would it take to migrate clients to IPV6? here are more specific questions: 1. Can a translation from V4 to V6 can occur at the ISP level, removing the need to replace home routers/modems? 2. If not, what would be required to be done by the end user/home user if his ISP will switch to V6? 3. If someone has a server at a hosting company, or he gets a static IP, does he/she needs to ask for another V6 IP? Thanks, Hetz -- Skepticism is the lazy person's default position. my blog (hebrew): http://benhamo.org ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: the cost of switching to IPv6?
On Fri, May 1, 2009 at 3:29 AM, Hetz Ben Hamo het...@gmail.com wrote: Hi, I know TCP/IP but I'm not an expert on this issue, so I want to ask about the following scenario: Neither am I, but here goes. According to an article in The Register (http://www.theregister.co.uk/2009/04/30/ipv4_depletion/), ARIN (the group that gives IP's) will make life a bit harder when companies would ask for additional IP's. ARIN are going nuts with power. They have been sending people who own number blocks email asking them to join without payment, but if you do you agree to pay for your number block (probably an inital and recurring fees) when they decide to start charging. If you don't agree they can't make you pay, but they are liable to start giving away the ranges of people who don't pay. So, I was wondering: I'm almost sure that by now, most of the big ISP's here in Israel have some IPV6 infrastructure and some IP's, but what would it take to migrate clients to IPV6? here are more specific questions: They probably don't. IPv6 costs more money to maintain and slows things down in a mixed environment. I found that things get faster here because I only have a local IPv6 infrastructure that is poorly supported, if I turn it off whenever possible. Considering my (and others recent experience with local ISPs, I would debate the existence of an IPv4 infrastructure at Israeli ISPs. 1. Can a translation from V4 to V6 can occur at the ISP level, removing the need to replace home routers/modems? No, it would be of no use. They would have to use some sort of IPv4 to IPv6 conversion on the fly in their routers which adds cost to maintain, run and support. Most of the web service providers only provide IPV4 connections anyway, and they and their ISP's would have to upgrade. Obviously they will someday, but I'm sure the big companies will try their best to avoid it. 2. If not, what would be required to be done by the end user/home user if his ISP will switch to V6? A new router with ISPv6 support and translation. Since 99% of the home users in Israel tunnel, they would have to change the tunneling software. Considering you can buy an IPv4 router with 80211.g Wifi for 130 NIS it will be a long time before an enhanced IPv6 router will come down to the price that everyone will pay for one. 3. If someone has a server at a hosting company, or he gets a static IP, does he/she needs to ask for another V6 IP? Yes, you need both. There is only one DNS system, so you won't have to change anything, just make sure your DNS provider supports IPv6 and you keep your IP addresses updated. Because of the way things work around here, I would expect that you will be able to get IPv6 service soon from your ISP. You will have to pay extra for the service (probably commerical rates at first), and get a new router. For the first year or two, you probably won't get to any sites outside of your ISP until IIX is upgraded and the other ISPs upgrade their networks and interconnections. The main factor is money, most companies, especially in these times won't spend money for new technology just because it is new technology, and I doubt that any ISP can justify IPv6 unless they can charge real costumers real money to do it. How much would you be willing to pay extra for IPv6? 100 NIS a month? 500? 1000? How many people you know would be willing to pay anything at all? Geoff. -- Geoffrey S. Mendelson N3OWJ/4X1GM Jerusalem, Israel ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ipv6 q
On Tuesday 21 April 2009 14:40:32 Erez D wrote: hi i can ping www.yahoo.com, but when i ping6 www.yahoo.com - i get unknow host does ipv4 and ipv6 use different dns ? There is no record for www.yahoo.com, as far as I can see, so there is no IPV6 address to ping... ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ipv6 q
this rfc does not talk about different dns protocols for ipv6 dns and ipv4 dns, it talks about standard dns servers which have ipv4 and / or ipv6 stacks. so it has nothing to do with ping6 (as the dns for it can run using ipv4, only the icmp is ipv6). thanks, erez. On Tue, Apr 21, 2009 at 3:58 PM, David Ronkin dron...@gmail.com wrote: Sure, it'll take time while both will work ok, read this rfc: http://www.ietf.org/rfc/rfc3901.txt ...When the Internet moves from IPv4 to a mixture of IPv4 and IPv6 it is only a matter of time until this starts to happen. The complete DNS hierarchy then starts to fragment into a graph where authoritative name servers for certain nodes are only accessible over a certain transport. The concern is that a resolver using only a particular version of IP and querying information about another node using the same version of IP can not do it because somewhere in the chain of servers accessed during the resolution process, one or more of them will only be accessible with the other version of IP 2009/4/21 Erez D erez0...@gmail.com hi i can ping www.yahoo.com, but when i ping6 www.yahoo.com - i get unknow host does ipv4 and ipv6 use different dns ? ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il -- בברכה, דוד רונקין ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
ipv6 q
hi i can ping www.yahoo.com, but when i ping6 www.yahoo.com - i get unknow host does ipv4 and ipv6 use different dns ? ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: ipv6 q
Sure, it'll take time while both will work ok, read this rfc: http://www.ietf.org/rfc/rfc3901.txt ...When the Internet moves from IPv4 to a mixture of IPv4 and IPv6 it is only a matter of time until this starts to happen. The complete DNS hierarchy then starts to fragment into a graph where authoritative name servers for certain nodes are only accessible over a certain transport. The concern is that a resolver using only a particular version of IP and querying information about another node using the same version of IP can not do it because somewhere in the chain of servers accessed during the resolution process, one or more of them will only be accessible with the other version of IP 2009/4/21 Erez D erez0...@gmail.com hi i can ping www.yahoo.com, but when i ping6 www.yahoo.com - i get unknow host does ipv4 and ipv6 use different dns ? ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il -- בברכה, דוד רונקין ___ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
Re: IPv6 support by ISPs - current status? (was: Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday)
Hi, What is the status of IPv6 in Israel? Does any of the ISP provide it? To ATM or ADSL customers? According to http://www.sixxs.net/faq/connectivity/?faq=native there appears more and more IPv6 aware ISPs, but nothing in Israel. Should firewall builders start bother with filtering IPv6 traffic ( http://www.debian-administration.org/articles/622)? -- Arie
Re: IPv6 support by ISPs - current status? (was: Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday)
As far as I know, none of the ISP provide ipv6 yet. On Sun, Jan 11, 2009 at 8:51 AM, Arie Skliarouk sklia...@gmail.com wrote: Hi, What is the status of IPv6 in Israel? Does any of the ISP provide it? To ATM or ADSL customers? According to http://www.sixxs.net/faq/connectivity/?faq=native there appears more and more IPv6 aware ISPs, but nothing in Israel. Should firewall builders start bother with filtering IPv6 traffic ( http://www.debian-administration.org/articles/622)? -- Arie
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Oron Peled wrote: On Sunday, 9 בNovember 2008, Gilad Ben-Yossef wrote: Oron Peled wrote: 2. ... only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? I don't really see the real issue here As a smart guy I'm sure you do, but I'll spell it out nevertheless: Access to the slides is *restricted* (to scribd subscribers) I still don't agree but I think it's turning too off topic and anyway, I've already put direct links to the original slides on the lecture pages for all the last 4 lectures. Hence forth new material will include a direct download link and some when I'll find the time to add links for the older ones Peace, Gilad -- Gilad Ben-Yossef Chief Coffee Drinker Codefidence Ltd. The code is free, your time isn't.(TM) Web:http://codefidence.com Email: [EMAIL PROTECTED] Office: +972-8-9316883 ext. 201 Fax:+972-8-9316885 Mobile: +972-52-8260388 The Doctor: Don't worry, Reinette, just a nightmare. Everyone has nightmares. Even monsters from under the bed have nightmares, don't you, monster? Reinette: What do monsters have nightmares about? The Doctor: Me!
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Hi, Oron Peled wrote: Some rant + possible way out... On Friday, 7 בNovember 2008, Rami Rosen wrote: 2) Slides for today IPv6 lecture are available in tuxology web site are here: http://tuxology.net/lectures/ipv6-in-the-linux-kernel/ Thanks, but since tuxology choose to store the slides in scribd, i encountered some... hurdles: 1. All content handling is based on flash. Many of my hosts don't have flash installed. Even simple wget is banned that way. You're a big overreacting. Yes, there's a flash applet that shows the slides inline in the page, but underneath each such applet there's a link to download the content. 2. After searching the page, I found a direct link (albeit with a horribly encoded url), only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? 3. The last too items also mean we cannot practically link directly to these presentations. As a result their chance to be indexed and found by search engines are nil (yes, I know scribd front pages with the document titles are indexed -- so what? what about the full text?) This unnecessarily lowers the long term value of this content. I don't really see the real issue here but since you seem to be bothered by this I'm going to add a direct link to the original slides. This will take time tough... Can't we afford hosting our own community presentations? No, hosting space is not the issue. Making efficient use of my time is - Scribd is convenient being that it automatically creates a version in various formats (PDF/ODP/DOC etc.) and a nice preview image (although flash based). I was aiming to reach a larger audience then the usual suspects with the new site and club (and judging from the participants of the last meeting it is working) - one that wont have OO installed despite most slides being written with the tool. I didn't want to spend time converting to different formats so I choose Scribd. As I said I will add a direct link to original slides when I have time. Gilad -- Gilad Ben-Yossef Chief Coffee Drinker Codefidence Ltd. The code is free, your time isn't.(TM) Web:http://codefidence.com Email: [EMAIL PROTECTED] Office: +972-8-9316883 ext. 201 Fax:+972-8-9316885 Mobile: +972-52-8260388 The Doctor: Don't worry, Reinette, just a nightmare. Everyone has nightmares. Even monsters from under the bed have nightmares, don't you, monster? Reinette: What do monsters have nightmares about? The Doctor: Me!
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
On Sunday 09 November 2008, Gilad Ben-Yossef wrote: Hi, Oron Peled wrote: Some rant + possible way out... On Friday, 7 בNovember 2008, Rami Rosen wrote: 2) Slides for today IPv6 lecture are available in tuxology web site are here: http://tuxology.net/lectures/ipv6-in-the-linux-kernel/ Thanks, but since tuxology choose to store the slides in scribd, i encountered some... hurdles: 1. All content handling is based on flash. Many of my hosts don't have flash installed. Even simple wget is banned that way. You're a big overreacting. Yes, there's a flash applet that shows the slides inline in the page, but underneath each such applet there's a link to download the content. The problem is that the download link only works if you're registered. Regards, Shlomi Fish - Shlomi Fish http://www.shlomifish.org/ The Case for File Swapping - http://xrl.us/bjn7i Shlomi, so what are you working on? Working on a new wiki about unit testing fortunes in freecell? -- Ran Eilam To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Gilad Ben-Yossef wrote: 1. All content handling is based on flash. Many of my hosts don't have flash installed. Even simple wget is banned that way. You're a big overreacting. Yes, there's a flash applet that shows the slides inline in the page, but underneath each such applet there's a link to download the content. Blah! s/big/bit/ Sorry about the typo... Gilad -- Gilad Ben-Yossef Chief Coffee Drinker Codefidence Ltd. The code is free, your time isn't.(TM) Web:http://codefidence.com Email: [EMAIL PROTECTED] Office: +972-8-9316883 ext. 201 Fax:+972-8-9316885 Mobile: +972-52-8260388 The Doctor: Don't worry, Reinette, just a nightmare. Everyone has nightmares. Even monsters from under the bed have nightmares, don't you, monster? Reinette: What do monsters have nightmares about? The Doctor: Me!
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
On Sunday, 9 בNovember 2008, Gilad Ben-Yossef wrote: Oron Peled wrote: 2. ... only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? I don't really see the real issue here As a smart guy I'm sure you do, but I'll spell it out nevertheless: Access to the slides is *restricted* (to scribd subscribers) - Scribd is convenient being that it automatically creates a version in various formats (PDF/ODP/DOC etc.) and a nice preview image (although flash based). You're entitled to your personall preferences. But for future readers of this thread -- OpenOffice.org produces PDF in one click which is surely shorter than login to scribd [ And no need to subscribe to anything to get this feature ] I was aiming to reach a larger audience then the usual suspects with the new site and club (and judging from the participants of the last meeting it is working) Don't underestimate your fame... it's not the scribd preview images that bring the people ;-) -- Oron Peled Voice/Fax: +972-4-8228492 [EMAIL PROTECTED] http://www.actcom.co.il/~oron In fact, one of the saddest but most common conditions in elementary school computer labs ..., is the children are being trained to use Word, Excel and PowerPoint. I consider that criminal, because children should be making things, communicating, exploring, sharing, not running office automation tools. -- Nicholas Negroponte To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
I agree, why subscribe to scribd to get a file. See haifux example. I am particullary annoyed to subscribe to web sites, unless it's really a must. On Mon, Nov 10, 2008 at 8:50 AM, Oron Peled [EMAIL PROTECTED] wrote: On Sunday, 9 בNovember 2008, Gilad Ben-Yossef wrote: Oron Peled wrote: 2. ... only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? I don't really see the real issue here As a smart guy I'm sure you do, but I'll spell it out nevertheless: Access to the slides is *restricted* (to scribd subscribers) - Scribd is convenient being that it automatically creates a version in various formats (PDF/ODP/DOC etc.) and a nice preview image (although flash based). You're entitled to your personall preferences. But for future readers of this thread -- OpenOffice.org produces PDF in one click which is surely shorter than login to scribd [ And no need to subscribe to anything to get this feature ] I was aiming to reach a larger audience then the usual suspects with the new site and club (and judging from the participants of the last meeting it is working) Don't underestimate your fame... it's not the scribd preview images that bring the people ;-) True. -- Oron Peled Voice/Fax: +972-4-8228492 [EMAIL PROTECTED] http://www.actcom.co.il/~oronhttp://www.actcom.co.il/%7Eoron In fact, one of the saddest but most common conditions in elementary school computer labs ..., is the children are being trained to use Word, Excel and PowerPoint. I consider that criminal, because children should be making things, communicating, exploring, sharing, not running office automation tools. -- Nicholas Negroponte To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
Hi Omer, I have been able to do it using: apt-get install tspc verify tun works: ifconfig tun and ping: ipv6.google.com PING ipv6.google.com(2001:4860:0:1001::68) 56 data bytes 64 bytes from 2001:4860:0:1001::68: icmp_seq=1 ttl=52 time=305 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=3 ttl=52 time=494 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=4 ttl=52 time=505 ms ^C --- ipv6.google.com ping statistics --- 5 packets transmitted, 3 received, 40% packet loss, time 4013ms rtt min/avg/max/mdev = 305.720/435.197/505.567/91.669 ms I also found http://www.cyberciti.biz/faq/tspc-debian-ubuntu-linux-configure-ipv6-tunnel/ as reference But since it worked without a hitch didn't have to use it. So I see two options: 1) Your firewall is blocking 2) Your NAT hinders it Try to play with tunnel_mode=v6anyv4 and if_tunnel_v6v4=sit1, if_tunnel_v6udpv4=tun They appear to (in several mailing list) allow you to circumvent the firewall issue. You can use ethereal (wireshark) to see the data being sent on port 3653 - as well as the channel being built. On Friday 07 November 2008 14:32:23 Omer Zak wrote: After installation of the tspc package (version 2.1.1-6), the tspc daemon can be started and when started, it sets up the sit1 interface (which can be viewed by /sbin/ifconfig) and ping6 to the assigned IPv6 address works. Since I am reluctant to register for a channel broker, I use the anonymous login to anon.freenet6.net. The problem is that even after setting up the tunnel, attempts to ping6 IPv6 hosts (such as ipv6.google.com or www.ipv6.uni-muenster.de) yield no response. Is there anything I should do besides starting the aforementioned daemon? According to http://www.howtoforge.com/using-ipv6-on-debian-etch, I should set up also sit0 interface. What are the roles of sit0 and sit1, and why are both necessary? Is there anything I should do to get tspc to set up also sit0? --- Omer -- Noam Rathaus CTO [EMAIL PROTECTED] http://www.beyondsecurity.com Know that you are safe. Beyond Security Finalist for the Red Herring 100 Global Awards 2007 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
Hello Noam, Thanks for your answer. I still need more help. On Sat, 2008-11-08 at 10:09 +0200, Noam Rathaus wrote: I have been able to do it using: apt-get install tspc I installed it, too. verify tun works: ifconfig tun I do not have tun, but I have sit0 and sit1. Should tun exist as well? If yes, how do I find why wasn't it set up as well? According to lsmod, the following modules are loaded: - tun - sit - tunnel4 (used by sit) - ipv6 (used by sit) Am I missing anything? and ping: ipv6.google.com PING ipv6.google.com(2001:4860:0:1001::68) 56 data bytes 64 bytes from 2001:4860:0:1001::68: icmp_seq=1 ttl=52 time=305 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=3 ttl=52 time=494 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=4 ttl=52 time=505 ms ^C --- ipv6.google.com ping statistics --- 5 packets transmitted, 3 received, 40% packet loss, time 4013ms rtt min/avg/max/mdev = 305.720/435.197/505.567/91.669 ms When I try to ping6 ipv6.google.com, I get no response. According to wireshark, ICMPv6 echo requests are sent, but there are no echo replies. I tried all 4 values of -I parameter of ping6: sit0,sit1 - no response. sit,tun - unknown iface. I tried to ping6 both ipv6.google.com and 2001:4860:0:1001::68 (with -I both sit0 and sit1) - no response. So I see two options: 1) Your firewall is blocking 2) Your NAT hinders it How to check for those possibilities? Try to play with tunnel_mode=v6anyv4 and if_tunnel_v6v4=sit1, if_tunnel_v6udpv4=tun My /etc/tsp/tspc.conf already has those settings. You can use ethereal (wireshark) to see the data being sent on port 3653 - as well as the channel being built. According to wireshark, the channel does get set up. I suspect something is strange in the output of route -6. How should it look like? My route -6 output looks like this (certain information was censored by replacing it by asterisks): 2001:5c0:8fff::8000:0::/128 :: U 25600 sit1 2001:5c0:8fff::8000:1::/128 2001:5c0:8fff::8000:1:: UC0 80 sit1 2000::/3:: U 1 00 sit1 fe80::/64 :: U 25600 eth0 fe80::/64 :: U 25600 eth1 fe80::/64 :: U 25600 sit1 ::1/128 :: U 0 78 1 lo 2001:5c0:8fff::8000:0::/128 :: U 0 01 lo fe80::/128 :: U 0 02 lo fe80::/128 :: U 0 02 lo fe80::/128 :: U 0 02 lo fe80:::/128 :: U 0 01 lo fe80:::/128 :: U 0 01 lo fe80:::/128 :: U 0 01 lo fe80::211:2fff::/128:: U 0 71 lo fe80::2c0:cff::/128 :: U 0 01 lo ff00::/8:: U 25600 eth0 ff00::/8:: U 25600 eth1 ff00::/8:: U 25600 sit1 Thanks, --- Omer -- Did you shave a yak today? My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
Hi Omer, On Saturday 08 November 2008 11:13:34 Omer Zak wrote: Hello Noam, Thanks for your answer. I still need more help. On Sat, 2008-11-08 at 10:09 +0200, Noam Rathaus wrote: I have been able to do it using: apt-get install tspc I installed it, too. verify tun works: ifconfig tun I do not have tun, but I have sit0 and sit1. Should tun exist as well? If yes, how do I find why wasn't it set up as well? I have no idea who made it, my guess is it either came from tspc or openvpn With openvpn I used, but in this case, I didn't do it, so I guess its either a leftover or was done when I installed: openvpn --mktun --dev tun According to lsmod, the following modules are loaded: - tun Here as well - sit Not here - tunnel4 (used by sit) Nope - ipv6 (used by sit) Yep Am I missing anything? and ping: ipv6.google.com PING ipv6.google.com(2001:4860:0:1001::68) 56 data bytes 64 bytes from 2001:4860:0:1001::68: icmp_seq=1 ttl=52 time=305 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=3 ttl=52 time=494 ms 64 bytes from 2001:4860:0:1001::68: icmp_seq=4 ttl=52 time=505 ms ^C --- ipv6.google.com ping statistics --- 5 packets transmitted, 3 received, 40% packet loss, time 4013ms rtt min/avg/max/mdev = 305.720/435.197/505.567/91.669 ms When I try to ping6 ipv6.google.com, I get no response. According to wireshark, ICMPv6 echo requests are sent, but there are no echo replies. I tried all 4 values of -I parameter of ping6: sit0,sit1 - no response. sit,tun - unknown iface. You shouldn't see any ICMPv6 traffic! TSPC tunnels everything via IPv4/IPv4UDP, so no ICMPv6 should be visible. I tried to ping6 both ipv6.google.com and 2001:4860:0:1001::68 (with -I both sit0 and sit1) - no response. So I see two options: 1) Your firewall is blocking 2) Your NAT hinders it How to check for those possibilities? My guess is that something isn't properly configured, as wireshark didn't show any traffic on the TSPC port. Try to play with tunnel_mode=v6anyv4 and if_tunnel_v6v4=sit1, if_tunnel_v6udpv4=tun My /etc/tsp/tspc.conf already has those settings. You can use ethereal (wireshark) to see the data being sent on port 3653 - as well as the channel being built. According to wireshark, the channel does get set up. I suspect something is strange in the output of route -6. How should it look like? My route -6 output looks like this (certain information was censored by replacing it by asterisks): 2001:5c0:8fff::8000:0::/128 :: U 25600 sit1 2001:5c0:8fff::8000:1::/128 2001:5c0:8fff::8000:1:: UC0 80 sit1 2000::/3:: U 1 00 sit1 fe80::/64 :: U 25600 eth0 fe80::/64 :: U 25600 eth1 fe80::/64 :: U 25600 sit1 ::1/128 :: U 0 78 1 lo 2001:5c0:8fff::8000:0::/128 :: U 0 01 lo fe80::/128 :: U 0 02 lo fe80::/128 :: U 0 02 lo fe80::/128 :: U 0 02 lo fe80:::/128 :: U 0 01 lo fe80:::/128 :: U 0 01 lo fe80:::/128 :: U 0 01 lo fe80::211:2fff::/128:: U 0 71 lo fe80::2c0:cff::/128 :: U 0 01 lo ff00::/8:: U 25600 eth0 ff00::/8:: U 25600 eth1 ff00::/8:: U 25600 sit1 Thanks, --- Omer [EMAIL PROTECTED]:~# route -6 Kernel IPv6 routing table DestinationNext Hop Flag Met Ref Use If 2001:5c0:8fff:::eb/128 :: U256 0 0 tun 2000::/3 :: U1 0 0 tun fe80::/64 :: U256 0 0 eth0 fe80::/64 :: U256 0 0 tun ::/0 :: !n -1 1 2 lo ::1/128:: Un 0 1 4 lo 2001:5c0:8fff:::eb/128 :: Un 0 1 1 lo fe80::211:11ff:fe55:bf01/128 :: Un 0 1 0 lo ff00::/8 :: U256 0 0 eth0 ff00::/8 :: U256 0
Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
Hello Noam, I may not have clarified myself. Basically, when I set wireshark to listen to sit1, it captures my ping6's Echo Request packets - but no replies. I also found that there are no ppp0 or eth1 traffic corresponding to the ping6-created sit1 traffic (my PC has two Ethernet cards, and eth1 is the one which is connected to the ADSL modem; I use pptp and it creates the network device ppp0; in other words, any IPv6 traffic is supposed to pass through sit1-ppp0-eth1 and back). I did see ppp0 traffic when tspc creates a tunnel, and it indicates success in connecting to anon.freenet6.net (the IPv6 tunnel broker which I use, as it supports anonymous logins). After reading the 2008-08-25 - Configuring IPv6 using AARNet's free broker article at http://www.nick-andrew.net/ I found that my iptables firewall blocked protocol 41 packets in both input and output. On Sat, 2008-11-08 at 22:11 +0200, Noam Rathaus wrote: When I try to ping6 ipv6.google.com, I get no response. According to wireshark, ICMPv6 echo requests are sent, but there are no echo replies. I tried all 4 values of -I parameter of ping6: sit0,sit1 - no response. sit,tun - unknown iface. You shouldn't see any ICMPv6 traffic! TSPC tunnels everything via IPv4/IPv4UDP, so no ICMPv6 should be visible. See my comment above. I tried to ping6 both ipv6.google.com and 2001:4860:0:1001::68 (with -I both sit0 and sit1) - no response. So I see two options: 1) Your firewall is blocking This turned out to have been the case. The following iptables commands fixed the problem (where: IPTABLES=/sbin/iptables INET_IFACE=ppp+): $IPTABLES -A INPUT -p 41 -i $INET_IFACE -j ACCEPT $IPTABLES -A OUTPUT -p 41 -o $INET_IFACE -j ACCEPT --- Omer -- Did you shave a yak today? My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
Hi Omer, So now it works? :) On Sunday 09 November 2008 01:04:10 Omer Zak wrote: Hello Noam, I may not have clarified myself. Basically, when I set wireshark to listen to sit1, it captures my ping6's Echo Request packets - but no replies. I also found that there are no ppp0 or eth1 traffic corresponding to the ping6-created sit1 traffic (my PC has two Ethernet cards, and eth1 is the one which is connected to the ADSL modem; I use pptp and it creates the network device ppp0; in other words, any IPv6 traffic is supposed to pass through sit1-ppp0-eth1 and back). I did see ppp0 traffic when tspc creates a tunnel, and it indicates success in connecting to anon.freenet6.net (the IPv6 tunnel broker which I use, as it supports anonymous logins). After reading the 2008-08-25 - Configuring IPv6 using AARNet's free broker article at http://www.nick-andrew.net/ I found that my iptables firewall blocked protocol 41 packets in both input and output. On Sat, 2008-11-08 at 22:11 +0200, Noam Rathaus wrote: When I try to ping6 ipv6.google.com, I get no response. According to wireshark, ICMPv6 echo requests are sent, but there are no echo replies. I tried all 4 values of -I parameter of ping6: sit0,sit1 - no response. sit,tun - unknown iface. You shouldn't see any ICMPv6 traffic! TSPC tunnels everything via IPv4/IPv4UDP, so no ICMPv6 should be visible. See my comment above. I tried to ping6 both ipv6.google.com and 2001:4860:0:1001::68 (with -I both sit0 and sit1) - no response. So I see two options: 1) Your firewall is blocking This turned out to have been the case. The following iptables commands fixed the problem (where: IPTABLES=/sbin/iptables INET_IFACE=ppp+): $IPTABLES -A INPUT -p 41 -i $INET_IFACE -j ACCEPT $IPTABLES -A OUTPUT -p 41 -o $INET_IFACE -j ACCEPT --- Omer -- Noam Rathaus CTO [EMAIL PROTECTED] http://www.beyondsecurity.com Know that you are safe. Beyond Security Finalist for the Red Herring 100 Global Awards 2007 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
SUCCESS (Re: Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?)
On Sun, 2008-11-09 at 07:56 +0200, Noam Rathaus wrote: Hi Omer, So now it works? :) YES, IT WORKS NOW! On Sunday 09 November 2008 01:04:10 Omer Zak wrote: 1) Your firewall is blocking This turned out to have been the case. The following iptables commands fixed the problem (where: IPTABLES=/sbin/iptables INET_IFACE=ppp+): $IPTABLES -A INPUT -p 41 -i $INET_IFACE -j ACCEPT $IPTABLES -A OUTPUT -p 41 -o $INET_IFACE -j ACCEPT --- Omer = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Some rant + possible way out... On Friday, 7 בNovember 2008, Rami Rosen wrote: 2) Slides for today IPv6 lecture are available in tuxology web site are here: http://tuxology.net/lectures/ipv6-in-the-linux-kernel/ Thanks, but since tuxology choose to store the slides in scribd, i encountered some... hurdles: 1. All content handling is based on flash. Many of my hosts don't have flash installed. Even simple wget is banned that way. 2. After searching the page, I found a direct link (albeit with a horribly encoded url), only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? 3. The last too items also mean we cannot practically link directly to these presentations. As a result their chance to be indexed and found by search engines are nil (yes, I know scribd front pages with the document titles are indexed -- so what? what about the full text?) This unnecessarily lowers the long term value of this content. Can't we afford hosting our own community presentations? OK, let's get practical: * If Herzelinux/tuxology is missing some storage/hosting options, I suggest giving them some space on one of our community servers. * Nothing fancy is called for -- even a single directory on Hamakor server for all their stuff, accessible via http/ftp is better then the current, shamefull situation. * Shachar, Gilad, can something as minimal as this be coordinated? What do you say? TIA, I'm anxious to read Rami's updated slides... -- Oron Peled Voice/Fax: +972-4-8228492 [EMAIL PROTECTED] http://www.actcom.co.il/~oron If an infinite number of monkeys typed randomly at an infinite number of typewriters for an infinite amount of time, they would eventually type out this sentencdfjg sd84wUUlksaWQE~kd ::. To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Anyone succeeded in setting up anonymous IPv6 connectivity in Debian Etch?
After installation of the tspc package (version 2.1.1-6), the tspc daemon can be started and when started, it sets up the sit1 interface (which can be viewed by /sbin/ifconfig) and ping6 to the assigned IPv6 address works. Since I am reluctant to register for a channel broker, I use the anonymous login to anon.freenet6.net. The problem is that even after setting up the tunnel, attempts to ping6 IPv6 hosts (such as ipv6.google.com or www.ipv6.uni-muenster.de) yield no response. Is there anything I should do besides starting the aforementioned daemon? According to http://www.howtoforge.com/using-ipv6-on-debian-etch, I should set up also sit0 interface. What are the roles of sit0 and sit1, and why are both necessary? Is there anything I should do to get tspc to set up also sit0? --- Omer -- Did you shave a yak today? My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Oron Peled wrote: * Shachar, Gilad, can something as minimal as this be coordinated? What do you say? No objection here. Shachar = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
On Friday 07 November 2008, Oron Peled wrote: Some rant + possible way out... On Friday, 7 בNovember 2008, Rami Rosen wrote: 2) Slides for today IPv6 lecture are available in tuxology web site are here: http://tuxology.net/lectures/ipv6-in-the-linux-kernel/ Thanks, but since tuxology choose to store the slides in scribd, i encountered some... hurdles: 1. All content handling is based on flash. Many of my hosts don't have flash installed. Even simple wget is banned that way. 2. After searching the page, I found a direct link (albeit with a horribly encoded url), only to be redirected to a login screen. Should our community content be held hostage behind some company login requirements? 3. The last too items also mean we cannot practically link directly to these presentations. As a result their chance to be indexed and found by search engines are nil (yes, I know scribd front pages with the document titles are indexed -- so what? what about the full text?) This unnecessarily lowers the long term value of this content. I agree with this criticism, but it gets better. First of all, I found that activating the Scribd Flash applet on swfdec (= an open-source Flash replacement) causes Firefox to crash. Furthermore, after I had registered on Scribd to get a different document I needed, I found that Firefox lost the password I entered. Now, changing the password requires the old password, which I didn't know. So I looked for a password reset form, but couldn't find one. Eventually, I did, but no matter how many times I submitted my [EMAIL PROTECTED] email address, I didn't get a password reset email. This is depsite the fact that the same address received several Welcome to Scribd emails. So now I am logged-in to Scribd, but do not know my password. Can't we afford hosting our own community presentations? OK, let's get practical: * If Herzelinux/tuxology is missing some storage/hosting options, I suggest giving them some space on one of our community servers. * Nothing fancy is called for -- even a single directory on Hamakor server for all their stuff, accessible via http/ftp is better then the current, shamefull situation. * Shachar, Gilad, can something as minimal as this be coordinated? What do you say? TIA, I'm anxious to read Rami's updated slides... I don't think hosting is a problem, and I have some hosting to offer as well. I think Scribd hosting was chosen for convenience or Web 2.0-ism. But it inconveniences all the users who want to access the slides. Regards, Shlomi Fish - Shlomi Fish http://www.shlomifish.org/ Why I Love Perl - http://xrl.us/bjn88 Shlomi, so what are you working on? Working on a new wiki about unit testing fortunes in freecell? -- Ran Eilam To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Links and some info about IPv6 in Linux lecture in Herzelinux yesterday (6.11.08)
Hello, As I promised, here are some links and some additional info about IPv6 in Linux lecture, which was given in Herzelinux yesterday (6.11.08) by me: 1) The article about IPv6 I wrote, which was published in linuxdevices two days ago, is here: http://www.linuxdevices.com/articles/AT7843301253.html 2) Slides for today IPv6 lecture are available in tuxology web site are here: http://tuxology.net/lectures/ipv6-in-the-linux-kernel/ 3) Network namespaces and sysfs: This issue was raised at the end of the lecture. For those who wonder what is the tagged sysfs patch and what it has to do with network namespaces and why it was dropped, here is a short explanation and links: The problem with network namespaces is that when using some processes, each with its own network stack (using network namespaces), it causes a problem regarding sysfs; the reason is that one process has, for example, /sys/class/net/eth0 entry, but a second process, with a different namespace, can also have a (different) /sys/class/net/eth0 entry. The entry /sys/class/net/eth0 has an important data :flags, statistics, and other parameters which are unique for each process with a different network stack. A solution for it was proposed by tagged sysfs, and patches were sent already in August 2008. They were accepted into GregKH tree, but as I said, recently GregKH announced that they are dropped because of a BUG. In this thread in LKML (Linux Kernel Mailing List), GregKH talks about dropping the sysfs patch from his tree: http://marc.info/?l=linux-kernelm=122318517411596w=2 the patch is: driver-core/sysfs-implement-sysfs-tagged-directory-support.patch see also: Sysfs and namespaces article in: http://lwn.net/Articles/295587/ 4) The links to the two vpn solutions I mentioned (and do not appear in the slides) are: http://www.openswan.org/ http://www.openvpn.org/ Best Regards, Rami Rosen = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
IPv6 support by ISPs - current status? (was: Re: Links and some info about IPv6 in Linux lecture in Herzelinux yesterday)
On Fri, 2008-11-07 at 01:14 +0200, Rami Rosen wrote: Hello, As I promised, here are some links and some additional info about IPv6 in Linux lecture, which was given in Herzelinux yesterday (6.11.08) by me: [... snipped ...] Few subjects, which I understand were not covered by the lecture and have great practical interest: 1. What is the status of IPv6 by your ISP, by your Web hosting service, by your E-mail provider? 2. Is it feasible TODAY to switch all your home/office network and its Internet connections to IPv6 and drop altogether any IPv4 use? If not, why? 3. What (if any) tunneling services are available if you want to access IPv6-only resources in the open Internet? -- Did you shave a yak today? My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
[Herzelinux] Rami Rosen on IPv6 in Linux
Hi all, This is a reminder that on Thursday, 6 Nov at 18:30 Herzelinux will host Rami Rosen lecture on IPv6 in the Linux kernel. This lecture will mostly deal with IPV6 implementation in the linux kernel. We will also discuss some IPV6 user space tools, and also draw a comparison between IPV6 and IPV4. Among the topics we will deal with are: * IPV6 * General background and history * ICMPV6 * Router Advertisements and Router Solicitations o Radvd daemon * Autoconfiguration o DHCPV6 o MLDv1 and MLDv2 o IPV6 header * SOKCET API Note: If time permits, we will also talk shortly about Network Namespaces and Bridging Subsystem. Herzel-what? Herzelinux is a Linux Linux user group. It's aim is to try to bridge the gap between professional Linux programmers working for Hi tech companies and the Linux Open Source community and bring them into the fold. As such: - The meeting topics will tend towards the advance technical stuff which is of interest to professional programmers. - The meeting takes place in Herzelia Pituch (Maskit 27, In hi-tech college - there's on a map on the site), a short walking distance from most of Silicon Wadi companies, to the pleasure of the lazy Hi Tech bums :-) Other then that it's just yet anther LUG, like Haifux and Telux, whose format we're basically mimicking (read: most sincere form of flattery and so on...) Needless to say, it's free, both in speech and in coffee (not very good coffee but it's provided for free by Hi tech College so we shouldn't complain) and you are all invited. In fact, I'd truly appreciate if you can spread the word and invite fellow programmers working on Linux which are not alpha Linux geeks. For more details: http://tuxology.net/herzelinux To get updates of club meeting by RSS: http://tinyurl.com/herzelinux For facebook lovers - join our group on facebook: http://www.facebook.com/pages/Herzliya-Israel/Herzelinux/10832254949 See you there, Gilad -- Gilad Ben-Yossef Chief Coffee Drinker Codefidence Ltd. The code is free, your time isn't.(TM) Web:http://codefidence.com Email: [EMAIL PROTECTED] Office: +972-8-9316883 ext. 201 Fax:+972-8-9316885 Mobile: +972-52-8260388 The Doctor: Don't worry, Reinette, just a nightmare. Everyone has nightmares. Even monsters from under the bed have nightmares, don't you, monster? Reinette: What do monsters have nightmares about? The Doctor: Me!
[HAIFUX Lecture] IPv6 in the Linux Kernel (Advanced Linux Kernel Networking) by Rami Rosen
Next Monday, 18th of August, haifux is about to meet and hear Rami Rosen's talk about IPv6 in the Linux Kernel (Advanced Linux Kernel Networking) This lecture will mostly deal with IPV6 implementation in the linux kernel. We will also discuss some IPV6 user space tools, and also draw a comparison between IPV6 and IPV4. Among the topics we will deal with are: * IPV6 * General background and history * ICMPV6 * Router Advertisements and Router Solicitations * Radvd daemon * Autoconfiguration * DHCPV6 * MLDv1 and MLDv2 * IPV6 header * SOKCET API Note: If time permits, we will also talk shortly about Network Namespaces and Bridging Subsystem. == We meet in Taub building, room 6. For instructions see: http://www.haifux.org/where.html Attendance is free, and you are all invited! == We are always interested in hearing your talks and ideas. If you wish to give a talk, hold a discussion, or just plan some event haifux might be interested in, please contact us at [EMAIL PROTECTED] -- Orr Dunkelman, [EMAIL PROTECTED] a scientific man ought to have no wishes, no affections, -- a mere heart of stone - Charles Darwin. GPG fingerprint: C2D5 C6D6 9A24 9A95 C5B3 2023 6CAB 4A7C B73F D0AA (This key will never sign Emails, only other PGP keys. The key corresponds to [EMAIL PROTECTED]) = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Status of IPv6 deployment in Israel?
On Tuesday 06 May 2008 00:10, Omer Zak wrote: What is the current status of IPv6 deployment in Israel? Hello Omer, The status of IPv6 deployment is as follows: 1. Machba/IIUCC (israel academic network) has IPv6 in it's core, and IPv6 is provided to each campus. It also has IPv6 connectivity to the world via it's service provider (GEANT- PanEuropean academic/research network). It also has IPv6 connectivity to IIX. 2. IIX is IPv6 enabled and supports peering via IPv6. BezeqINT and IIUCC already peer with it via v6. 3. BezeqINT has IPv6 in some of its core, and is connected to the IIX via IPv6. They might also have IPv6 connectivity to their upstream providers abroad (I assume they have at least one such v6 peering). 4. Smile Communications (012 + Internet Zahav) have IPv6 in the core network of what used to be Internet Zahav, and they also have at least one v6 peering with one of their upstreams. They also provide a v6 service, that is irc.ipv6.inter.net.il The above only includes v6 data of applications/implementations on the public internet, there may also be deployments inside companies for tests, product development, etc, but I do not have data on those. --Ariel -- Ariel Biener e-mail: [EMAIL PROTECTED] PGP: http://www.tau.ac.il/~ariel/pgp.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Status of IPv6 deployment in Israel?
What is the current status of IPv6 deployment in Israel? I am interested in an answer to this question because of the following projection: http://feeds.feedburner.com/~r/MonkeyBites/~3/284126431/996-days-projec.html http://he.net/news/Hurricane_Electric_IPv6_Update_April_2008.pdf --- Omer -- May the holy trinity of $_, @_ and %_ be hallowed. My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Porting Code from IPv4 to IPv6
Hi, Anyone has a link/site/guide on how to port code written for IPv4 to support IPv6? I have found numerous documentation for Windows - with guides and samples (courtesy of Microsoft), but couldn't find one for Linux that is of good quality. -- Noam Rathaus CTO [EMAIL PROTECTED] http://www.beyondsecurity.com Know that you are safe. Beyond Security Finalist for the Red Herring 100 Global Awards 2007 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Porting Code from IPv4 to IPv6
Hi, This HowTo, written by Eva M. Castro, may help you as a start: http://gsyc.es/%7Eeva/IPv6-web/ipv6.html Regards, Rami Rosen On Wed, Apr 16, 2008 at 8:56 PM, Noam Rathaus [EMAIL PROTECTED] wrote: Hi, Anyone has a link/site/guide on how to port code written for IPv4 to support IPv6? I have found numerous documentation for Windows - with guides and samples (courtesy of Microsoft), but couldn't find one for Linux that is of good quality. -- Noam Rathaus CTO [EMAIL PROTECTED] http://www.beyondsecurity.com Know that you are safe. Beyond Security Finalist for the Red Herring 100 Global Awards 2007 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
IPv6 in the Linux Kernel lecture slides are available now
Hi, For all those who were interested: The slides of the IPV6 in the Linux Kernel lecture are on Haifux Website now: see: http://www.haifux.org/lectures/187/netLec3.pdf This lecture is the third lecture in the advanced Linux Kernel Networking series, dealing with Linux Kernel implementation of IPv6, ICMPv6, Autoconfiguration, Router Advertisements and Router Solicitations, RADVD, MLDv1/MLDv2, DHCPv6, IPv6 Addresses and more. Regards, Rami Rosen = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
[HAIFUX Lecture] IPv6 in the Linux Kernel (Advanced Linux Kernel Networking) by Rami Rosen
Next Monday, 7th of April, at 18:30 the Haifa Linux Club, will gather to enjoy Rami Ronen's presenation about IPv6 in the Linux Kernel (Advanced Linux Kernel Networking) Abstract This lecture is a sequel to the Linux Kernel Networking lecture and Advanced Linux Kernel Networking - Neighboring Subsystem; IPSec. This lecture will mostly deal with IPV6 implementation in the linux kernel. We will also discuss some IPV6 user space tools, and also draw a comparison between IPV6 and IPV4. Among the topics we will deal with are: * IPV6 * General background and history * ICMPV6 * Router Advertisements and Router Solicitations o Radvd daemon * Autoconfiguration o DHCPV6 o MLDv1 and MLDv2 o IPV6 header o SOKCET API Note: If time permits, we will also talk shortly about Network Namespaces and Bridging Subsystem. == We meet in Taub building, room 6. For instructions see: http://www.haifux.org/where.html Attendance is free, and you are all invited! == Future Lectures: None. You see, our queue is empty. Now I don't want to sound like the Polish mother who can sit in the dark while you go outside in a cold night without sweater and not calling her once you arrive (Sheko'o Ye'hie li Tov), so I won't say a word. I will just sit here quite, and look at the mailbox, hoping that someone, maybe YOU, will send an email to [EMAIL PROTECTED] proposing an interesting presentation. I mean, I already have my diploma, and the bell is for me and for you. And of course, Don't drink marijuana there, you hear me?!?. We are always interested in hearing your talks and ideas. If you wish to give a talk, hold a discussion, or just plan some event haifux might be interested in, please contact us at [EMAIL PROTECTED] -- Orr Dunkelman, [EMAIL PROTECTED] Any human thing supposed to be complete, must for that reason infallibly be faulty -- Herman Melville, Moby Dick. GPG fingerprint: C2D5 C6D6 9A24 9A95 C5B3 2023 6CAB 4A7C B73F D0AA (This key will never sign Emails, only other PGP keys. The key corresponds to [EMAIL PROTECTED]) = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
