Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 403715 - gentoo.supp.name (download server) IPv6 issues.
Summary: gentoo.supp.name (download server) IPv6 issues.
Status: RESOLVED FIXED
Alias: None
Product: Mirrors
Classification: Unclassified
Component: Server Problem (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Mirror Admins
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-02-14 21:52 UTC by Nico Baggus
Modified: 2012-03-02 08:14 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nico Baggus 2012-02-14 21:52:46 UTC
DNS queries for gentoo.supp.name do respond with an IPv6 address, but the connect to IPv6 for fetching package images fails:


 * tesseract-2.00.spa.tar.gz RMD160 SHA1 SHA256 size ;-) ...             [ ok ]
>>> Downloading 'http://gentoo.supp.name/distfiles/tesseract-2.00.nld.tar.gz'
--2012-02-14 22:36:22--  http://gentoo.supp.name/distfiles/tesseract-2.00.nld.tar.gz
Resolving gentoo.supp.name (gentoo.supp.name)... 2001:1568:b:0:164::1, 2001:1568:b:0:164::1, 2001:1568:b:0:164::1, ...
Connecting to gentoo.supp.name (gentoo.supp.name)|2001:1568:b:0:164::1|:80... failed: Connection timed out.
Connecting to gentoo.supp.name (gentoo.supp.name)|2001:1568:b:0:164::1|:80... failed: Connection timed out.
Connecting to gentoo.supp.name (gentoo.supp.name)|2001:1568:b:0:164::1|:80... failed: Connection timed out.
Connecting to gentoo.supp.name (gentoo.supp.name)|81.91.84.194|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1408071 (1,3M) [application/x-gzip]
Saving to: “/home/portdir/tesseract-2.00.nld.tar.gz”

Please either revoke the AAAA record OR enable the IPv6 services.

Reproducible: Always
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-02-14 21:57:01 UTC
Tomas, can you check on this please?
Comment 2 Nico Baggus 2012-02-26 17:52:04 UTC
I still see no changes ...
IPv6 still fails.
Comment 3 Nico Baggus 2012-02-29 20:17:42 UTC
For people in need for a quick fix, the IPv6 host can be blackhold with a rule on the firewall like:

ip6tables -I FORWARD -d 2001:1568:b:0:164::1 -j REJECT
(as it still fails atm.)
Comment 4 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-02-29 21:10:59 UTC
Within a short amount of time, the host will be removed from our mirror listings completely due to no available contact.
Comment 5 Tomas Kindl 2012-03-01 14:05:33 UTC
Please remove IPv6 address for this mirror - we're still getting it on-line and the ipv6 variant is not (obviously) ready for production. Thank you!
Comment 6 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-03-01 14:20:48 UTC
(In reply to comment #5)
> Please remove IPv6 address for this mirror - we're still getting it on-line
> and the ipv6 variant is not (obviously) ready for production. Thank you!

Huh? We can't do that, you control your own DNS...
Comment 7 Tomas Kindl 2012-03-01 14:31:38 UTC
OMG, silly me :-)
AAAA record removed until IPv6 connectivity issues have been settled on our side. Sorry for trouble.
Comment 8 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-03-01 17:14:49 UTC
Thanks.
Comment 9 Nico Baggus 2012-03-02 08:14:26 UTC
OK. blackholing removed.