Re: [SOLVED]: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Paul Dokas
On 12/29/12 08:31, Michael Grimm wrote: > I've been told to change my outgoing rule from ... > > | pass out log on $extIF inet6 proto {tcp, udp, icmp6, gre} all modulate state > > ... to ... > > | pass out log on $extIF inet6 proto {tcp, udp, icmp6, gre} all > > ... and that did the trick! No m

Re: [SOLVED]: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread CyberLeo Kitsana
On 12/29/2012 08:31 AM, Michael Grimm wrote: > Hi -- > > On 29.12.2012, at 13:07, Kimmo Paasiala wrote: >> On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana >> wrote: >>> On 12/28/2012 05:59 AM, Michael Grimm wrote: > I do run both my primary and secondary nameservers (distinct servers) i

[SOLVED]: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Michael Grimm
Hi -- On 29.12.2012, at 13:07, Kimmo Paasiala wrote: > On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana > wrote: >> On 12/28/2012 05:59 AM, Michael Grimm wrote: >>> I do run both my primary and secondary nameservers (distinct servers) in >>> FreeBSD jails1 and jail2 as outlined below: >> >>

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Kimmo Paasiala
On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana wrote: > On 12/28/2012 05:59 AM, Michael Grimm wrote: >> Hi -- >> >> I do run both my primary and secondary nameservers (distinct servers) in >> FreeBSD jails1 and jail2 as outlined below: > >> I do see using tcpdump at server1: >> >> | 00:00:02.

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread CyberLeo Kitsana
On 12/28/2012 05:59 AM, Michael Grimm wrote: > Hi -- > > I do run both my primary and secondary nameservers (distinct servers) in > FreeBSD jails1 and jail2 as outlined below: > I do see using tcpdump at server1: > > | 00:00:02.066251 xx:xx:xx:xx:xx > yy:yy:yy:yy:yy, ethertype IPv6 (0x86dd), >

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Mark Martinec
On Saturday December 29 2012 10:48:41 Michael Grimm wrote: > - Disabling PF at 9.1 allows outgoing tcp6 to 9.1 with enabled PF. > > Thus, it seems to me that the pf code in 9.1 is responsible for screwing > tcp6. Make sure to have 'scrub reassemble tcp' off: misc/172648: pf(4): 'scrub reassemble

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Michael Grimm
Hi -- On 28.12.2012, at 12:59, Michael Grimm wrote: > But without any success, so, what's going wrong here: > - Is it my setup regarding pf? > - Is it my setup in general? > - Is it a screwed IPv6 routing? > - Or something else? What I can say now, is: - It has nothing to do with my setup rega