[ipv6-tf] wot ciekawostka "przejściowa"

[Patryk Szczygłowski]

W dniu 2011-03-22 15:23, Jacek Zapala pisze:
> Jeśli by ogłaszał 2001::/32 a nie przepuszczał ruchu, to należałoby go jak
> najszybciej odstrzelić, bo uniemożliwiałby komunikację pomiędzy wszystkimi
> użytkownikami teredo na świecie a posiadaczami ipv6 w plixie (przynajmniej
> tymi, którzy akceptują prefix 2001::/32 z astera).

I chyba właśnie tak jest :(

Na kliencie z Teredo Clientem:

$ sudo miredo -f
miredo[79765]: Starting...
miredo[79767]: New Teredo address/MTU
miredo[79767]: Teredo pseudo-tunnel started
miredo[79767]:  (address: 2001::53aa:64c:899:2cbf:3e21:783d, MTU: 1280)
route: writing to routing socket: No such process
delete net default: not in table
add net default: gateway tun0
miredo[79767]: Internal IPv4 address: 192.168.3.239
miredo[79767]:  packet passed to maintenance procedure
miredo[79767]: Connecting <unknown>: NOT trusted, NOT valid, 0 pings, 0 
bubbles
miredo[79767]: 2001:6a0:19e::2: ping returned 0
miredo[79767]: Connecting 0.0.0.0: NOT trusted, NOT valid, 1 pings, 0 
bubbles
miredo[79767]: 2001:6a0:19e::2: ping returned 1
miredo[79767]: Connecting 0.0.0.0: NOT trusted, NOT valid, 1 pings, 0 
bubbles
miredo[79767]: 2001:6a0:19e::2: ping returned 1
miredo[79767]: Connecting 0.0.0.0: NOT trusted, NOT valid, 1 pings, 0 
bubbles

$ ping6 mortnet.pl
PING6(56=40+8+8 bytes) 2001::53aa:64c:899:2cbf:3e21:783d --> 2001:6a0:19e::2
Request timeout for icmp_seq=0
Request timeout for icmp_seq=1
Request timeout for icmp_seq=2
Request timeout for icmp_seq=3

$ sudo tcpdump -i tun0
tcpdump: WARNING: tun0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type NULL (BSD loopback), capture size 65535 bytes
12:19:55.240244 IP6 2001::53aa:64c:899:2cbf:3e21:783d > 2001:6a0:19e::2: 
ICMP6, echo request, seq 27, length 16
12:19:56.240163 IP6 2001::53aa:64c:899:2cbf:3e21:783d > 2001:6a0:19e::2: 
ICMP6, echo request, seq 28, length 16
12:19:57.240832 IP6 2001::53aa:64c:899:2cbf:3e21:783d > 2001:6a0:19e::2: 
ICMP6, echo request, seq 29, length 16
12:19:58.240661 IP6 2001::53aa:64c:899:2cbf:3e21:783d > 2001:6a0:19e::2: 
ICMP6, echo request, seq 30, length 16

Na pingowanym hoście zdalnym:

$ sudo tcpdump -i sixxs icmp6
tcpdump: WARNING: sixxs: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on sixxs, link-type RAW (Raw IP), capture size 65535 bytes
12:20:34.639177 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 58303, length 12
12:20:34.639208 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 58303, length 12
12:20:34.679797 IP6 kp-mm-r3.rtr.net.icm.edu.pl > 2001:6a0:19e::1337: 
ICMP6, destination unreachable, unreachable address 
2001:0:4137:9e76:0:fba0:4379:8c3c, length 60
12:20:36.599107 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 28219, length 12
12:20:36.599126 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 28219, length 12
12:20:36.995506 IP6 2001:0:4137:9e76:0:ef16:b1db:5ac7 > 
2001:6a0:19e::1337: ICMP6, echo request, seq 18986, length 12
12:20:36.995527 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:ef16:b1db:5ac7: ICMP6, echo reply, seq 18986, length 12
12:20:37.570825 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 62710, length 12
12:20:37.570840 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 62710, length 12
12:20:38.610788 IP6 2001:0:4137:9e76:0:ef16:b1db:5ac7 > 
2001:6a0:19e::1337: ICMP6, echo request, seq 29424, length 12
12:20:38.610800 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:ef16:b1db:5ac7: ICMP6, echo reply, seq 29424, length 12
12:20:39.098871 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 52951, length 12
12:20:39.098885 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 52951, length 12
12:20:40.609625 IP6 2001:0:4137:9e76:0:ef16:b1db:5ac7 > 
2001:6a0:19e::1337: ICMP6, echo request, seq 56803, length 12
12:20:40.609649 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:ef16:b1db:5ac7: ICMP6, echo reply, seq 56803, length 12
12:20:41.100692 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 60319, length 12
12:20:41.100708 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 60319, length 12
12:20:43.605837 IP6 2001:0:4137:9e76:0:fba0:4379:8c3c > 
2001:6a0:19e::1337: ICMP6, echo request, seq 21906, length 12
12:20:43.605852 IP6 2001:6a0:19e::1337 > 
2001:0:4137:9e76:0:fba0:4379:8c3c: ICMP6, echo reply, seq 21906, length 12
12:20:43.645490 IP6 kp-mm-r3.rtr.net.icm.edu.pl > 2001:6a0:19e::1337: 
ICMP6, destination unreachable, unreachable address 
2001:0:4137:9e76:0:fba0:4379:8c3c, length 60

Wg https://tools.net.icm.edu.pl/lg/ preferowaną trasą do 2001::/32 jest 
AS12476 (Aster). Ma ktoś z nimi kontakt?

-- 
Patryk Szczygłowski
JID/mail: patryk w patryk.net