SixXS::Sunset 2017-06-06

[Linux 2.6] Connection pings sometimes
[nl] Shadow Hawkins on Wednesday, 05 May 2004 10:03:06
hi, I've managed to setup my tunnel, but the pings from the pop only work when I'm actually transferring data over the tunnel. This is a screenshot from the relevant tunnel statistics: http://213.10.88.36/screenshots/sixxs.png On monday I've set up an irc-client to just idle somewhere. It worked and the pop could ping me fine again, until the end of the day it stopped pinging again for some strange reason... My routing table: # ip -6 route 2001:838:300:65::/64 via :: dev sixxs metric 256 mtu 1280 advmss 1220 2001:838:334::/48 dev eth0 metric 1024 mtu 1500 advmss 1440 fe80::/64 dev eth0 metric 256 mtu 1500 advmss 1220 fe80::/64 via :: dev sixxs metric 256 mtu 1280 advmss 1220 ff00::/8 dev eth0 metric 256 mtu 1500 advmss 1220 ff00::/8 dev sixxs metric 256 mtu 1280 advmss 1220 default via 2001:838:300:65::1 dev sixxs metric 1024 mtu 1280 advmss 1220 unreachable default dev lo proto none metric -1 error -101 advmss 1220 Interface: # ifconfig sixxs sixxs Link encap:IPv6-in-IPv4 inet6 addr: fe80::d50a:5824/128 Scope:Link inet6 addr: 2001:838:300:65::2/64 Scope:Global UP POINTOPOINT RUNNING NOARP MTU:1280 Metric:1 RX packets:19328 errors:0 dropped:0 overruns:0 frame:0 TX packets:13263 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:17802233 (16.9 Mb) TX bytes:1283713 (1.2 Mb) Thanks in advantage
[Linux 2.6] Connection pings sometimes
[ch] Jeroen Massar SixXS Staff on Friday, 18 June 2004 11:01:54
You should learn to read the FAQ: My tunnel goes down after some idletime. I run Linux with iptables/NAT. Edit: updated the url
[Linux 2.6] Connection pings sometimes
[nl] Shadow Hawkins on Thursday, 17 June 2004 18:50:42
The single line from the faq was not enough, I figured out that the problem was solved after I added these two lines to my firewall: iptables -A INPUT --proto 41 -s $SIXXS_IP/32 -d $EXT_IP/32 -j ACCEPT iptables -A OUTPUT --proto 41 -s $EXT_IP/32 -d $SIXXS_IP/32 -j ACCEPT Of course, $SIXXS_IP is the pop's ip and $EXT_IP is the external ip.
[Linux 2.6] Connection pings sometimes
[ch] Jeroen Massar SixXS Staff on Friday, 18 June 2004 11:02:39
That is then because you are firewalling the proto-41 away, not because of connection tracking.

Please note Posting is only allowed when you are logged in.

Static Sunset Edition of SixXS
©2001-2017 SixXS - IPv6 Deployment & Tunnel Broker