Test your IPv6 - failing on one test

[jezuk1]

Hi Folks,

I've noticed recently test-ipv6.com is reporting 9/10 instead of the usual 10/10 for IPv6 connectivity. As far as I'm concerned I consider this low priority, I'm posting for informative purposes in the event this might be of interest to the powers above

The quoted reason for failing the last test is: "Your DNS server (possibly run by your ISP) appears to have no access to the IPv6 Internet, or is not configured to use it."
SS: http://i.imgur.com/WFhLLng.png

The only thing is that I can't extract enough information from this website to determine the exact reason for failing this test. All I know is that I was getting 10/10 until a month(ish) ago and there have been no changes to my router's configuration that I'm aware of to affect this although I'm certainly not ruling out a problem at my end

That's all for now, happy to provide any other info if I can do so 

[Bill]

test-ipv6.com gives me 10/10: "Your DNS server (possibly run by your ISP) appears to have IPv6 Internet access."

Which IPv6 DNS address are you using? My router uses 2a02:390:2:0:5054:ff:fefa:828b, I think I set it manually (along with everything else on v6) but I'm not 100% sure.

[jezuk1]

Autoconfigured
PS C:\> ipconfig /all
..
..
..
   DNS Servers . . . . . . . . . . . : 2a02:390:2:0:5054:ff:fefa:828b
                                       192.168.1.254
..
..

[Bill]

Ah well, it was a thought

[jezuk1]

Ah well, it was a thought

It was a good thought though, because it highlights it's almost certainly a problem with my configuration. I have yet to determine why, but it's certainly valuable information and I thank you for making that post.

[Bill]

Afterthought...

I think I've seen that message myseelf on a couple of occasions. It appeared without me doing anything and disappeared the same way after a few days.

I don't understand IPv6

(I don't know much about IPv4 either, but that's another matter )

[jezuk1]

Afterthought...

I think I've seen that message myseelf on a couple of occasions. It appeared without me doing anything and disappeared the same way after a few days.

I don't understand IPv6

(I don't know much about IPv4 either, but that's another matter )

I agree, I don't understand enough about IPv6 to know why this test is failing. All I know is that is has been failing for roughly a month (at least when I've checked it) and I'll have to do some reading to know more 

[jezuk1]

I can conclude the final test fails on all internal devices, two Windows PCs and my Android 4.3 phone. I'm now looking towards my Billion 7800N, although I am quite certain nothing has changed there for a long time 

[Steve]

If you've not done so you could try OpenDNS or Google IPv6 DNS as an alternative / secondary. All entries on my router are set manually, the devices seem to sort themselves out.

[andrue]

Mine gives a big fail these days. I got fed up of my DLink router crashing after half a day of VPN use so I replaced it with a TP-Link TL-WDR3600. Unfortunately that doesn't support dual-stack and/or doesn't support it over a single PPP session. Consequently I've gone back to having no IPv6. Absolutely zero impact on my use of the Internet of course but irritating. I've been in discussions with the support people (sorta) so maybe they will do something about it. Given the price of the 3600 it's a real shame that it doesn't support IPv6 in a usable way.

[mervl]

Sorry but from my experience of IPv6 (with a successful set up) what do you actually need it for? I have a "bought in" VPN (mainly for use with the mobiles when I'm out and about and might be connecting to dogdy 3rd party wifis), and it actually disables the use of IPv6 because of the increased security risks of compromising the VPN tunnel. I know that like kids we all like to do things "because we can", and I'm as bad an example as anyone, but it's about time we grew up.

[Steve]

But the kids of today will be the adults using IPv6, however it's still about as much use as a chocolate teapot.

[Bill]

what do you actually need it for?

I don't need it for anything... but I've got a lot of things I don't need, so I don't see that the question has particular relevance to be honest.

[jezuk1]

If you've not done so you could try OpenDNS or Google IPv6 DNS as an alternative / secondary. All entries on my router are set manually, the devices seem to sort themselves out.

I manually set DNS servers to Google and the test gets 10/10.
If I leave it autoconfigured or manually set the DNS to 2a02:390:2:0:5054:ff:fefa:828b, it goes back to 9/10

Strange 

what do you actually need it for?

Sure, right now I don't need it, but that's because anything I could possibly conceive needing to access has an IPv4 address too. The fact that most registries are down to their last one or two /8's and the IPv4 address space is close to exhaustion means that sooner rather or later we're probably going to have to get IPv6 up and running surely. Take-up is rapidly accelerating now if you look at the Google statistics, although it's still low (<2%) it's exponential in growth.
http://www.google.com/ipv6/statistics.html

[mervl]

I'm still surprised that so many sites (Google is an exception) still don't have an IPv6 option (BBC anyone?) - has it increased at all since IPv6 day last year which was promoted as the great switch-on? Don't the IT industry like it or something?

Just out of interest why isn't this IT knowledgeable site, with an ISP offering native IPv6, offering the option? 

I know of the addressing problem which has been on-going for years, though I still suspect the major ISPs may look at address sharing (which works fine on my back-up Fixed Wireless service). And is the security issue with VPN real?

I know the old argument that one day there will come a tipping point and magically we'll all wake up and find IPv6 sites available everywhere. It's just I can't quite bring myself to believe it'll quite be like that.

[Steve]

There's an idea and IPv6 idnetters.

SMF has no support for IPv6 if I recall. Well not strictly true there's is a community mod that supports it, but goodness knows what the server side support is and also there's the question of IP moderation , we'd have to ban a whole prefix for any effectiveness. Looks like a can of worms to me.

[Steve]

I manually set DNS servers to Google and the test gets 10/10.
If I leave it autoconfigured or manually set the DNS to 2a02:390:2:0:5054:ff:fefa:828b, it goes back to 9/10

Strange 

I tried removing IDNet IPv6 DNS and it's taken me a good 15 mins to get back online again.

[andrue]

Don't the IT industry like it or something?

Depends whether they are keen, hardworking IT people up for a challenge or not. IPv6 roll-out is a big headache and there aren't many technical resources to help. Worse still not all equipment works properly.

I can well imagine that the majority of people in IT would rather not have to deal with it.

And is the security issue with VPN real?

I thought there were two kinds of leaks:

• You can leak your IPv6 address when using a VPN which is an anonymity problem.
• On a dual-stack network your device might choose an IPv6 path instead of a path through the VPN.

The first seems to be a bug in implementation and whether or not it matters depends why you are using a VPN. If it's just to keep data secret than it probably doesn't matter but if you're trying to hide your activities it probably does.
The second may or may not matter. It depends how dangerous it is to have your traffic avoiding the VPN. IPv6 has IPSec built-in so if both ends of the connection want to encrypt the traffic they can do.