MSGID: <10jigka$3k8b9$1@dont-email.me> 68b11707
REPLY: a883e8d7
PID: PyGate 1.5.2
TID: PyGate/Linux 1.5.2
CHRS: ASCII 1
TZUTC: 0000
REPLYADDR Pancho.Jones@protonmail.com
REPLYTO 3:633/10 UUCP
On 1/4/26 15:20, Richard Kettlewell wrote:
> Pancho writes:
>> Richard Kettlewell wrote:
>>> https://www.greenend.org.uk/rjk/tech/nat.html has a worked example.
>>
>> Curiously is an
>> example of a website that fails to load when I use IPv6 but works fine
>> under IPv4
>>
>> curl -4 https://www.greenend.org.uk/rjk/tech/nat.html
>> works fine
>> .
>> curl -6 https://www.greenend.org.uk/rjk/tech/nat.html
>> times out.
>
> It works for me from a couple of locations (one with native IPv6 and
> the other via a Hurricance Electric tunnel). traceroute -6 might reveal
> where your problem is.
>
>> Last thing I receive in IPv6 pcap from Greenend says
>> [TCP Previous segment not captured]
>
> AFAICT that just means you started tracing part way through a session.
>
Thanks both of you, that gave me confidence to investigate further.
I'm guessing it is due to a split TCP packet. TLS asks for a change of
cipher, which is a big packet, and then it all goes wrong.
Anyway, setting MTU=1444 fixes the problem. Internet tells me that the
root problem is because the firewall is blocking ICMP too big, breaking
Path MTU Discovery (PMTUD) . I can't see where, so now I have to
understand that.
--- PyGate Linux v1.5.2
* Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
SEEN-BY: 105/81 106/201 128/187 129/14 305 153/7715 154/110 218/700
SEEN-BY: 226/30 227/114 229/110 112 134 200 206 275 300 317 400 426
SEEN-BY: 229/428 470 616 664 700 705 266/512 291/111 292/854 320/219
SEEN-BY: 322/757 342/200 396/45 460/58 633/10 280 414 418 420 422
SEEN-BY: 633/509 2744 712/848 770/1 902/26 2320/105 5020/400 5075/35
PATH: 633/10 280 229/426
|
