NICMx
http connection failed
Configure the network according to the example of Stateful NAT64 on the official website, you can send and accept icmp, but http cannot
env: ubuntu18 iptables tcpdump error message: 64:ff9b::203.0.113.16 cannot route
$ wget http://[64:ff9b::203.0.113.16]/archive.7z
--2022-01-19 08:06:07-- http://[64:ff9b::203.0.113.16]/archive.7z
Connecting to 64:ff9b::203.0.113.16 (64:ff9b::203.0.113.16)|64:ff9b::cb00:7110|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 537304 (525K) [application/x-7z-compressed]
Saving to: ‘archive.7z’
archive.7z 100%[======>] 524.71K --.-KB/s in 0.008s
2022-01-19 08:06:07 (65.1 MB/s) - ‘archive.7z’ saved [537304/537304]
Works fine for me.
tcpdump error message: 64:ff9b::203.0.113.16 cannot route
Works fine for me:
$ sudo tcpdump -ni vboxnet0 host 64:ff9b::203.0.113.16
08:13:24.029469 IP6 64:ff9b::cb00:7110.80 > 2001:db8::8.44632: Flags [S.], seq 727844829, ack 1135569178, win 65160, options [mss 1460,sackOK,TS val 2525517162 ecr 198001399,nop,wscale 7], length 0
(...)
Environment:
$ uname -a
Linux ubuntu18 4.15.0-163-generic #171-Ubuntu SMP Fri Nov 5 11:55:11 UTC 2021 x86_64 x86_64 GNU/Linux
- What's the output of
ip addressin all three nodes? - What's the output of
ip routein all three nodes? - What's the output of
ip -6 routein all three nodes? - Can
ApingT? - Can
VpingT? - What's the output of
sudo jool global displayinT?
ip address ip route ip -6 route no problem
A can png V
A can ping T
V can ping T
sudo jool global display output: This namespace lacks an instance named 'default'
T
ip r:
203.0.113.0/24 dev enp5s0 proto kernel scope link src 203.0.113.1
ip -6 r:
2001:db8::/96 dev enp6s0 proto kernel metric 256 pref medium
fe80::/64 dev enp5s0 proto kernel metric 256 pref medium
fe80::/64 dev enp6s0 proto kernel metric 256 pref medium
ip -br -c a:
enp5s0 up 203.0.113.1/24 fe80::a653:eeff:fe70:23e5/64
enp6s0 up 2001:db8::1/96 fe80::a653:eeff:fe70:23e6/64
A
ip -6 r:
64:ff9b::/96 via 2001:db8::1 dev enp4s0 metric 1024 pref medium
2001:db8::/96 dev enp4s0 proto kernel metric 256 pref medium
ip -br -c a:
enp4s0 UP 2001:db8::8/96
V
ipconfig:
203.0.113.16
255.255.255.0
Ok; nothing strange so far.
sudo jool global displayoutput:This namespace lacks an instance named 'default'
Sorry; I meant
sudo jool -i example global display
- What's the output of
sudo iptables -t mangle -L? - What's the output of
sudo ip6tables -t mangle -L? - Please run in
T:
sudo jool -i example global update logging-debug true
sudo dmesg -C
Then quickly try your HTTP request from A, then run dmesg in T. Post the output.
After executing your method, now my Terminator can connect with http, but the browser and gnome terminal cannot connect with http. I think it may be a problem with my computer?
iptables -t mangle -L :output JOOL all -- anywhere anywhere instance:example
ip6tables -t mangle -L :output JOOL all -- anywhere anywhere instance:example
Your browser is using HTTPS, not HTTP.
What happens if you remove the "s" from the URL?
It it works, you probably just have some certificate problem.
After executing your method, now my Terminator can connect with http
The "method" wasn't meant to fix the problem; it was meant to print output that might help us find the problem. Please follow the instructions until the end:
T:
sudo jool -i example global update logging-debug true
sudo dmesg -C
A:
<HTTP query from browser>
T:
dmesg
Post the output of dmesg.
And when you're done, make sure to disable debug logging. Otherwise it will slow things down and take up disk space.
Sorry. My English is not good. My browser is using HTTP.
dmesg no output.
Try capturing the HTTP packets on T:
sudo tcpdump -i any -w packets.pcap
Then post the packets.pcap file here.
On Thu, Jan 20, 2022 at 7:47 PM YunlongWang @.***> wrote:
Sorry. My English is not good. My browser is using HTTP.
dmesg no output.
— Reply to this email directly, view it on GitHub https://github.com/NICMx/Jool/issues/373#issuecomment-1018086745, or unsubscribe https://github.com/notifications/unsubscribe-auth/AASHNF7RCWWRSB32BFGUJLTUXC3JLANCNFSM5MJAAT3A . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
You are receiving this because you commented.Message ID: @.***>
I came into an issue in OpenWrt where if I have a port forwarding jool wouldn't work, I don't know if it helps.
