pfSense Support Subscription

Author Topic: [SOLVED] webConfigurator do not answer IPv6 requests  (Read 7438 times)

0 Members and 1 Guest are viewing this topic.

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
[SOLVED] webConfigurator do not answer IPv6 requests
« on: August 10, 2013, 04:33:44 pm »
Hi guys,

webConfigurator do not answer IPv6 requests. I can connect by IPv4 only, but my tunnel config has IPv6 addresses only. Please add a webConfigurator option to allow lighttpd to answer IPv6 calls on all chosen interfaces (i.e. WAN, LAN and GIF).
« Last Edit: August 10, 2013, 06:12:41 pm by Luzemario »
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +956/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #1 on: August 10, 2013, 04:37:14 pm »
It answers IPv6 just fine. Using it all the time. You need to create proper firewall rules to allow access to 80/443 on your tunnel iface.
Do NOT PM for help!

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
Re: webConfigurator do not answer IPv6 requests
« Reply #2 on: August 10, 2013, 05:06:34 pm »
I can't even connect webConfigurator directly on LAN by IPv6. LAN *has* a rule to pass *all* IPv6 traffic. I can connect other services on pfSense box via IPv6 as SSH.
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +956/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #3 on: August 10, 2013, 05:10:17 pm »
You are clearly doing something wrong...

Code: [Select]
$ sockstat -6 -l | grep lighttpd
root     lighttpd   31281 11 tcp6   *:443                 *:*
« Last Edit: August 10, 2013, 05:12:25 pm by doktornotor »
Do NOT PM for help!

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #4 on: August 10, 2013, 05:12:37 pm »
What do you suppose it is that he might possibly be doing wrong?  haha

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +956/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #5 on: August 10, 2013, 05:14:00 pm »
What do you suppose it is that he might possibly be doing wrong?  haha

Considering the huge amount of information provided... I guess

Do NOT PM for help!

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #6 on: August 10, 2013, 05:27:35 pm »
If the rest of his IPV6 stuff is working, one might think he didn't select IPV6 in the firewall rules when he was allowing access to the GUI - Although, as you say, its all guessing. 

Does the "Allow IPV6" button in the advanced > networking kill IPV6 everywhere if checked or just that IPV6 flowing through the WAN?

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
Re: webConfigurator do not answer IPv6 requests
« Reply #7 on: August 10, 2013, 05:46:20 pm »
Thanks for the quick reply guys...

yes, My IPv6 setup is almost complete. Yes, "allow IPv6" is checked. Yes, running

Code: [Select]
sockstat -6 -l | grep lighttpd
returns wich lighttpd is listenning on tcp6, and yes, I *receive a https response*, but it gives me a blank page (sorry for not telling you this before...)  ;D

webConfigurator was adjusted to answer only to https requests... and thanks to your quickly responses, I was urged to use a bit more of brain and matched the bug: it only happens when webConfigurator is setted up to https only and one tries to connect https via IPv6... it can be a Firefox bug, but I cannot test with other browsers right now.
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #8 on: August 10, 2013, 05:51:00 pm »
Are you using it from within a VPN or SSH or something distantly or did you just forward open those ports on your WAN?

You mention a tunnel?  Like a IPV6 tunnel broker like HE?
« Last Edit: August 10, 2013, 05:52:35 pm by kejianshi »

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
Re: webConfigurator do not answer IPv6 requests
« Reply #9 on: August 10, 2013, 06:02:18 pm »
Just now I am accessing from inside LAN. When I chose HTTPS with default webConfigurator certificate, FF appears to get a blank page (or not get the page at all). I am trying to open the address

Code: [Select]
https://[myInternalUniqueGlobalAlreadyWorkingIP]:myport (a valid IPv6 address:port of course)

But FF refuses to display the login page. It works as expected on my local https://192.168.xxx.yyy:pppp IPv4 address.
« Last Edit: August 10, 2013, 06:05:57 pm by Luzemario »
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: webConfigurator do not answer IPv6 requests
« Reply #10 on: August 10, 2013, 06:07:51 pm »
Hmmm - No idea in that case. 

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
[SOLVED] Re: webConfigurator do not answer IPv6 requests
« Reply #11 on: August 10, 2013, 06:12:10 pm »
Yeah, I'm surprised, IT IS A FIREFOX 23.0 bug. I could sucessfully open the webConfigurator page using Konqueror...

I'm scared...  ???
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline Luzemario

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
    • Internet Services
Re: [SOLVED] webConfigurator do not answer IPv6 requests
« Reply #12 on: August 10, 2013, 08:33:31 pm »
Update: If you want to test your Firefox, try to open the address below (Google):

https://[2607:f8b0:4008:803::1015]

If you try http://[2607:f8b0:4008:803::1015]:443 Firefox says url is incorrect.

This behavior do not happen if you open IPv6 page by name (using DNS). Other browsers can open both addresses without trouble. Tested until Firefox ver 23.0
Cheapest hosting - Bom e barato! - www.luzehost.com.br :D

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: [SOLVED] webConfigurator do not answer IPv6 requests
« Reply #13 on: August 10, 2013, 08:39:26 pm »
You sure?  Cuz I love guessing wrong what might be wrong... 

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +956/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: [SOLVED] webConfigurator do not answer IPv6 requests
« Reply #14 on: August 11, 2013, 02:38:15 am »
You sure?

Yes. This bug has only been known for 2,5 years, with the guys doing zilch about; looks like it actually got worse meanwhile and not displaying any error message at all. SSL cannot set exceptions on IPv6 addresses

Also, other stupid regression, causing this to fail altogether, not just with untrusted SSL cert: - Firefox nightly doesn't connect to IPv6 literal

The development is going pretty much downhill, with useless crap such as the new social API and buttons, instead of focusing in something useful.
« Last Edit: August 11, 2013, 02:51:46 am by doktornotor »
Do NOT PM for help!