Re: http://www.6assist.net/ - call for test

2013-05-10 Thread Kurt Jaeger
Hi!

> > Which locations are those, lets discuss that, find those ISPs and help
> > them get native connectivity.

> One of them is Lebanon. All international connections must go
> through the incumbent telco, and they don't/won't do IPv6. Annoying,
> insane, but a fact of life for the ISPs in such countries. So all
> the ISPs that do IPv6 have to do it with tunnels to HE, OCCAID etc.

So a list with difficult countries and cities and the problematic
carriers, somewhere on a webpage ? And some bigwigs from the ISOC/IETF/ITU 8-)
or so that start to get in touch with the problematic carriers ?

Or does that sound too easy ?

-- 
p...@opsec.eu+49 171 3101372 7 years to go !


Re: RA & DHCP problem...

2013-12-30 Thread Kurt Jaeger
Hi!

> What is wrong with having a _choice_

In protocol design, there seems to be a rule which says:

Options are bad

I once heard that from the IPsec camp, after they tried the
other way, very hard 8-}

Looking at recent OpenVPN variants, they seem to disagree with that
rule, too 8-)

-- 
p...@opsec.eu+49 171 3101372 7 years to go !


Re: SMTP over IPv6 : gmail classifying nearly all IPv6 mail as spam since 20140818

2014-08-22 Thread Kurt Jaeger
Hi!

Nick wrote:
> On 22/08/2014 15:16, Lorenzo Colitti wrote:
> > Are you following the "Additional guidelines for IPv6" section of
> > https://support.google.com/mail/answer/81126 ?
> 
> Lorenzo,
> 
> it looks like Google is trying to enforce SPF / DKIM on ipv6 connections 
> where there is no similar requirement for ipv4.  Is there a particular 
> reason for this?  It's causing a lot of breakage.

It is understable from my point of view. IPv6 is a new protocol
and SPF and DKIM are a clue filter to avoid the basic issues we had
in the past.

So it's not really breakage. It's more of a learning curve 8-}

But, if there's a paper from google about the reasoning, I would very much
learn more about it 8-)

-- 
p...@opsec.eu+49 171 3101372 6 years to go !


Re: IPv6 issues at Google

2014-11-08 Thread Kurt Jaeger
Hi!

> I'm afraid I don't see the supporting evidence here. From my point
> of view, Google and Akamai IPv6 both work just fine.

>From here (AS12502) google and youtube no longer work (due to IPv6,
probably).

I have not tested akamai.

-- 
p...@opsec.eu+49 171 3101372 6 years to go !


Re: Why do we still need IPv4 when we are migrating to IPv6...

2015-02-12 Thread Kurt Jaeger
Hi!

[Gert wrote]
> (I'm hearing more and more reports that the CGNs deployed by big german
> cable ISPs are breaking SIP and IPSEC to IPv4-only targets for their
> customers...)

Yes, they do break that. We had one case, where we replaced
IPsec with OpenVPN to overcome that issue.

KabelBW is selling business accounts with static IPv4 like mad, but
how long those last remains to be seen.

-- 
p...@opsec.eu+49 171 3101372 5 years to go !


Re: Slow WiFi with Android Marshmallow & IPv6?

2016-04-27 Thread Kurt Jaeger
Bjørn Mork  wrote:
> I thought we were discssing issues which are relevant for ISPs
> configuring end user CPEs.

In Germany, the end-user decides on the CPE/RG, part of
the telecommunications regulation. So having
working protocols to allow them to interoperate is very
important.

> The challenge is for an ISP managing home user CPEs, to make all random
> unmanaged end user devices Just Work(tm).

The current situation is not very helpful. Too many standards to
choose from, some of them non-interoperating. Some server-based,
some router/network-based. Bad.

> But we could discuss whether it currently makes sense to support DNS
> queries over IPv6 at all.

>From my point of view, the answer is: Yes, DNS over IPv6 is essential.

> Resolver libraries are notorioulsy bad at
> fail-over, so there isn't really any point in more than that.

Maybe this is the core of the problem. And getting the
resolver libs upgraded (yes, I know, another can of worms).

-- 
p...@opsec.eu+49 171 3101372 4 years to go !


Re: v6 naming and shaming - *.europa.eu

2016-05-18 Thread Kurt Jaeger
Hi!

> > Broken over IPv6:
> > 
> > https://webcast.ec.europa.eu/281715cafa675bf359ebaa42cb44fa17
> > 
> > (Webserver has , returns 404 over v6, fine over v4)

The tech-c seems to be:

otman.da...@ec.europa.eu

-- 
p...@opsec.eu+49 171 3101372 4 years to go !


Re: contact with One & One ?

2016-10-14 Thread Kurt Jaeger
Hi!

> > I've discovered, several months ago already, that all the 1&1 web sites 
> > with IPv6 support enabled are broken, because they filter PMTUD, so any 
> > residential customer with has a reduced MTU because PPP or any other 
> > encapsulation/tunnel, etc., is not reaching them.
> 
> Do you have an example of a website they host that I can test against?

www.corso-kino.de

-- 
p...@opsec.eu+49 171 3101372 4 years to go !


Re: contact with One & One ?

2016-10-14 Thread Kurt Jaeger
Hi!

> > www.corso-kino.de
> 
> Thanks.
> 
> If it helps, point them to this website (still in development/beta):
> 
> https://ipv6alizer.se/
> 
> The result is (verifies what you said):
> 
> INFO:  server-mss 1440, result: pmtud-fail
> ERROR: http://www.corso-kino.de don't listen to PTB

Thanks. It's just around the corner, and I think I can
get them to open a ticket with 1und1 8-}

-- 
p...@opsec.eu+49 171 3101372 4 years to go !