Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




95 posts

Master Geek


# 258493 7-Oct-2019 09:36
Send private message

Had an issue for a few days now trying to reach

 

https://ilibrary.co.nz/ which is the Invercargill Library.

 

Talked to their IT support guy this morning and he says its all 2 degrees customers and VF customers who use IPv6.

 

Turning off IPv6 and just using 4 is fine. IT support assure nothing has changed at the Library site, and he suggests its a routing issue with the above 2 ISP's.

 

Perhaps 2degrees could look it is, but its no biggy.

 

 

 

thanks


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
5416 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331723 7-Oct-2019 09:38
Send private message
556 posts

Ultimate Geek

Trusted
2degrees

  # 2331726 7-Oct-2019 09:42
2 people support this post
Send private message

Hi All,

I'm oof today, I've pinged to team to investigate.




nickmack GZ Signature


 
 
 
 


15255 posts

Uber Geek

Trusted
Subscriber

  # 2331731 7-Oct-2019 09:50
Send private message

I use 2deg and IP6. The first problem is the certificate is for another domain, www.metrosurveygroup.com.au. Once I click continue it takes me to there, not the library website.


705 posts

Ultimate Geek


  # 2331732 7-Oct-2019 09:50
Send private message

Looks more like its them or their hosting provider.

 

This server could not prove that it is ilibrary.co.nz; its security certificate is from www.metrosurveygroup.com.au. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

Edit: Ah...snap! Posted at the same time as Timmmay.




95 posts

Master Geek


  # 2331735 7-Oct-2019 09:53
Send private message

nzkc:

 

Looks more like its them or their hosting provider.

 

This server could not prove that it is ilibrary.co.nz; its security certificate is from www.metrosurveygroup.com.au. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

 

 

 

Library says they have had a lot of calls about it and they are all VF or 2 degrees customers on ipv6. As soon as you turn IPv6 off and flush dns access to the site is fine. But, I am no expert.

 

 


705 posts

Ultimate Geek


  # 2331737 7-Oct-2019 09:54
3 people support this post
Send private message

Its up to them (or their hosting provider) to make sure their DNS entries are correct.  It would seem the IPv6 one is not.


5416 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331739 7-Oct-2019 09:57
One person supports this post
Send private message

Just clicked on link connected to IPv6 this is not a 2degrees issue sorry @NickMack

 
 
 
 


BDFL - Memuneh
64698 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2331755 7-Oct-2019 10:46
One person supports this post
Send private message

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request




556 posts

Ultimate Geek

Trusted
2degrees

  # 2331765 7-Oct-2019 10:55
Send private message

HTTP using IPv6 doesn’t work at all, their webserver returns connection refused.

$ curl -6 http://ilibrary.co.nz/ -v

connect to 2404:8280:a222:bbbb:bba1:32:ffff:ffff port 80 failed: Connection refused

HTTPS using IPv6 points to another website altogether, metrosurveygroup.com.au.

 

$ curl -6 https://ilibrary.co.nz/ -v

Connected to ilibrary.co.nz (2404:8280:a222:bbbb:bba1:32:ffff:ffff) port 443 (#0)

curl: (51) SSL: certificate subject name (www.metrosurveygroup.com.au) does not match target host name 'ilibrary.co.nz'

 Nick




nickmack GZ Signature




95 posts

Master Geek


  # 2331793 7-Oct-2019 11:35
Send private message

All good stuff. Hope the library IT guy is reading this.


8 posts

Wannabe Geek


  # 2331895 7-Oct-2019 14:09
Send private message

freitasm:

 

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request

 

 

 

Wondering if you can shed a little light on this :) i have checked the AAAA records and they are none existant.

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

It is only an issue with Voda,trustpower and 2degrees from what i can see so far. But not on Voda business plans or mobiles witch is odd.

 

 

 

Any help would be appreciated.. :)


5416 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331900 7-Oct-2019 14:12
Send private message

@lordmuck SparkNZ are not doing IPv6 yet and this is why the issue does not happen on Spark


BDFL - Memuneh
64698 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

160 posts

Master Geek


  # 2331903 7-Oct-2019 14:15
Send private message

lordmuck:

 

freitasm:

 

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request

 

 

 

Wondering if you can shed a little light on this :) i have checked the AAAA records and they are none existant.

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

It is only an issue with Voda,trustpower and 2degrees from what i can see so far. But not on Voda business plans or mobiles witch is odd.

 

 

 

Any help would be appreciated.. :)

 

 

The default AAAA record for the domain has to be removed, or correctly pointed to the site if it has an IPv6 address.

 


BDFL - Memuneh
64698 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2331907 7-Oct-2019 14:17
One person supports this post
Send private message

@lordmuck:

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

 

Spark does not have IPv6 so you won't try to access the IPv6 address ever.

 

The SSL may be correct but your provider is binding the IPv6 address to another domain and SSL cert, despite the ilibrary.co.nz DNS AAAA.

 

If your domain is not supposed to support IPv6, remove the AAAA records from DNS. If it is supposed to support IPv6, then get your hosting provided to fix the site binding.





 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

OPPO Reno2 Series lands, alongside hybrid noise-cancelling Wireless Headphones
Posted 24-Oct-2019 15:32


Waikato Data Scientists awarded $13 million from the Government
Posted 24-Oct-2019 15:27


D-Link launches Wave 2 Unified Access Points
Posted 24-Oct-2019 15:07


LG Electronics begins distributing the G8X THINQ
Posted 24-Oct-2019 10:58


Arlo unveils its first video doorbell
Posted 21-Oct-2019 08:27


New Zealand students shortlisted for James Dyson Award
Posted 21-Oct-2019 08:18


Norton LifeLock Launches Norton 360
Posted 21-Oct-2019 08:11


Microsoft New Zealand Partner Awards results
Posted 18-Oct-2019 10:18


Logitech introduces new Made for Google keyboard and mouse devices
Posted 16-Oct-2019 13:36


MATTR launches to accelerate decentralised identity
Posted 16-Oct-2019 10:28


Vodafone X-Squad powers up for customers
Posted 16-Oct-2019 08:15


D Link ANZ launches EXO Smart Mesh Wi Fi Routers with McAfee protection
Posted 15-Oct-2019 11:31


Major Japanese retailer partners with smart New Zealand technology IMAGR
Posted 14-Oct-2019 10:29


Ola pioneers one-time passcode feature to fight rideshare fraud
Posted 14-Oct-2019 10:24


Spark Sport new home of NZC matches from 2020
Posted 10-Oct-2019 09:59



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.