6in4 permission denied

[zulu14]

Expected Behavior

hello yannick, IPV6 6IN4 not working , but the interface are UP , the ipv4 tunnel are OK, proxy (SS) are OK

Current Behavior

ping 6in4-omr6in4 -> omr-6in4-user0: OK

ping omr-6in4-user0 -> 6in4-omr6in4: 100%packet loss or "invalid argument" if i not specifiy the interface in ping

ping 6in4-omr6in4 -> google ipv6 (ipv6 not domain) permission denied (user as root and try with sudo (seem to be a network denied)

Specifications

• OpenMPTCProuter version: 0.58.5
• OpenMPTCProuter VPS version: 1026
• OpenMPTCProuter platform: X86

[Ysurac]

IPv6 is enabled in wizard ?

[zulu14]

hello yannick, yes the ipv6 is enabled, in syslog we have the omr-6in4 log say its enabled

[zulu14]

have you already get the "permission denied" error when you dev the 6in4 system ?

[Ysurac]

What tis the result of ip -6 a and ip -6 r on the router via SSH ? Check also that omr-6in4 is in correct firewall zone (vpn zone)

[zulu14]

6in4 are in VPN zone

[zulu14]

i have this in log:

[zulu14]

(lan0 is a mcvlan of eth1)

[Ysurac]

There is no public/lan ipv6 on lan check Network->Interfaces, LAN, DHCP Server tab, IPv6 settings

[zulu14]

[Ysurac]

Seems to be ok, what you have in Network->Interfaces, Global network options tab as ULA-Prefix ?

[zulu14]

empty

[zulu14]

[Ysurac]

It's the problem. You should set something like "fd53:8a41:3f89::/48" or a prefix from your VPS if it give you more than /127

[zulu14]

okay, i have only 1 ipv6 from the vps,

i setup like this:

if i ping test :

[zulu14]

(shorewall6 are OK and running ) ping ipv6.google.com on server side are OK

[Ysurac]

Check that you get an IPv6 on lan interface. If not, reboot.

[zulu14]

after reboot:

and same ping behavior

[Ysurac]

What do you have in "ip -6 r" now ? What is the default ipv6 route ?

[zulu14]

(tunnel: glorytun-TCP , proxy: SS , all wan are OK, proxy are OK, tunnel OK)

[zulu14]

PING Test:

[Ysurac]

Default IPv6 route seems to be missing

[Ysurac]

Route should be added via /bin/omr-6in4 script. Doesn't seems to work in your case. I will check why...

[Ysurac]

What is the result of logread | grep omr6in ? (to check if script is sometimes running or not) If empty, what is the result of /bin/omr-6in4 ?

[zulu14]

hello yannick , sorry for the delay, after checking, 6in4 bin file are empty !, i download it from the feeds (probably a missclick from me :/ )

the "permission denied" disapear and now its accept the ping, but he have no answer (100% packet loss)

[zulu14]

he said in log (only one time): user.notice omr6in4: Set network for OMR 6in4 to local 10.255.255.2 peer 10.255.255.1

[zulu14]

hello yannick little up

[Ysurac]

I don't understand how you can have some empty file on your installation... What did you really do ?

[zulu14]

we have build from feeds (fork) and i check the commit, i have make a mistakes and i have deleted this files , its now fixed but i have 100% packet loss

[Ysurac]

I don't support fork... Check "ip r" and set default route.