Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




199 posts

Master Geek


# 258493 7-Oct-2019 09:36
Send private message

Had an issue for a few days now trying to reach

 

https://ilibrary.co.nz/ which is the Invercargill Library.

 

Talked to their IT support guy this morning and he says its all 2 degrees customers and VF customers who use IPv6.

 

Turning off IPv6 and just using 4 is fine. IT support assure nothing has changed at the Library site, and he suggests its a routing issue with the above 2 ISP's.

 

Perhaps 2degrees could look it is, but its no biggy.

 

 

 

thanks


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
5793 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331723 7-Oct-2019 09:38
Send private message
605 posts

Ultimate Geek

Trusted
2degrees

  # 2331726 7-Oct-2019 09:42
2 people support this post
Send private message

Hi All,

I'm oof today, I've pinged to team to investigate.




nickmack GZ Signature


 
 
 
 


15556 posts

Uber Geek

Trusted
Subscriber

  # 2331731 7-Oct-2019 09:50
Send private message

I use 2deg and IP6. The first problem is the certificate is for another domain, www.metrosurveygroup.com.au. Once I click continue it takes me to there, not the library website.


786 posts

Ultimate Geek


  # 2331732 7-Oct-2019 09:50
Send private message

Looks more like its them or their hosting provider.

 

This server could not prove that it is ilibrary.co.nz; its security certificate is from www.metrosurveygroup.com.au. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

Edit: Ah...snap! Posted at the same time as Timmmay.




199 posts

Master Geek


  # 2331735 7-Oct-2019 09:53
Send private message

nzkc:

 

Looks more like its them or their hosting provider.

 

This server could not prove that it is ilibrary.co.nz; its security certificate is from www.metrosurveygroup.com.au. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

 

 

 

Library says they have had a lot of calls about it and they are all VF or 2 degrees customers on ipv6. As soon as you turn IPv6 off and flush dns access to the site is fine. But, I am no expert.

 

 


786 posts

Ultimate Geek


  # 2331737 7-Oct-2019 09:54
3 people support this post
Send private message

Its up to them (or their hosting provider) to make sure their DNS entries are correct.  It would seem the IPv6 one is not.


5793 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331739 7-Oct-2019 09:57
One person supports this post
Send private message

Just clicked on link connected to IPv6 this is not a 2degrees issue sorry @NickMack

 
 
 
 


BDFL - Memuneh
65310 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2331755 7-Oct-2019 10:46
One person supports this post
Send private message

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request




605 posts

Ultimate Geek

Trusted
2degrees

  # 2331765 7-Oct-2019 10:55
Send private message

HTTP using IPv6 doesn’t work at all, their webserver returns connection refused.

$ curl -6 http://ilibrary.co.nz/ -v

connect to 2404:8280:a222:bbbb:bba1:32:ffff:ffff port 80 failed: Connection refused

HTTPS using IPv6 points to another website altogether, metrosurveygroup.com.au.

 

$ curl -6 https://ilibrary.co.nz/ -v

Connected to ilibrary.co.nz (2404:8280:a222:bbbb:bba1:32:ffff:ffff) port 443 (#0)

curl: (51) SSL: certificate subject name (www.metrosurveygroup.com.au) does not match target host name 'ilibrary.co.nz'

 Nick




nickmack GZ Signature




199 posts

Master Geek


  # 2331793 7-Oct-2019 11:35
Send private message

All good stuff. Hope the library IT guy is reading this.


8 posts

Wannabe Geek


  # 2331895 7-Oct-2019 14:09
Send private message

freitasm:

 

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request

 

 

 

Wondering if you can shed a little light on this :) i have checked the AAAA records and they are none existant.

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

It is only an issue with Voda,trustpower and 2degrees from what i can see so far. But not on Voda business plans or mobiles witch is odd.

 

 

 

Any help would be appreciated.. :)


5793 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2331900 7-Oct-2019 14:12
Send private message

@lordmuck SparkNZ are not doing IPv6 yet and this is why the issue does not happen on Spark


BDFL - Memuneh
65310 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2331902 7-Oct-2019 14:13
Send private message

There are AAAA records for ilibrary.co.nz

 

If your ISP does not support IPv6 then you won't see them. Click the link above and you will see these records.

 





170 posts

Master Geek


  # 2331903 7-Oct-2019 14:15
Send private message

lordmuck:

 

freitasm:

 

This is not an IPv6 issue. It shows for 2degrees because that's an ISP with IPv6 support broadly available.

 

This is a problem with the library's hosting provider not creating the correct IPv6 records (the Ipv6 record AAAA exists and pointing to a server. Two options:

 

  • If the server for this domain doesn't support IPv6 for this domain then remove the AAAA record
  • If the server for this domain does support IPv6 then they need to make sure the AAAA is correct and the server is correctly processing the domain request

 

 

 

Wondering if you can shed a little light on this :) i have checked the AAAA records and they are none existant.

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

It is only an issue with Voda,trustpower and 2degrees from what i can see so far. But not on Voda business plans or mobiles witch is odd.

 

 

 

Any help would be appreciated.. :)

 

 

The default AAAA record for the domain has to be removed, or correctly pointed to the site if it has an IPv6 address.

 


BDFL - Memuneh
65310 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2331907 7-Oct-2019 14:17
One person supports this post
Send private message

@lordmuck:

 

Our SSL cert is fine and the issue seems only to be with IPV6 if you disable IPV6 and flush the resolver cache this issue disappears...

 

The odd thing is the issue does not occur with spark?

 

 

Spark does not have IPv6 so you won't try to access the IPv6 address ever.

 

The SSL may be correct but your provider is binding the IPv6 address to another domain and SSL cert, despite the ilibrary.co.nz DNS AAAA.

 

If your domain is not supposed to support IPv6, remove the AAAA records from DNS. If it is supposed to support IPv6, then get your hosting provided to fix the site binding.





 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Switch your broadband provider now - compare prices


Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Netflix releases 21 Studio Ghibli works
Posted 22-Jan-2020 11:42


Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30


JBL launches headphones range designed for gaming
Posted 13-Jan-2020 09:59


Withings introduces ScanWatch wearable combining ECG and sleep apnea detection
Posted 9-Jan-2020 18:34


NZ Police releases public app
Posted 8-Jan-2020 11:43


Suunto 7 combine sports and smart features on new smartwatch generation
Posted 7-Jan-2020 16:06


Intel brings innovation with technology spanning the cloud, network, edge and PC
Posted 7-Jan-2020 15:54


AMD announces high performance desktop and ultrathin laptop processors
Posted 7-Jan-2020 15:42


AMD unveils four new desktop and mobile GPUs including AMD Radeon RX 5600
Posted 7-Jan-2020 15:32


Consolidation in video streaming market with Spark selling Lightbox to Sky
Posted 19-Dec-2019 09:09


Intel introduces cryogenic control chip to enable quantum computers
Posted 10-Dec-2019 21:32


Vodafone 5G service live in four cities
Posted 10-Dec-2019 08:30


Samsung Galaxy Fold now available in New Zealand
Posted 6-Dec-2019 00:01


NZ company oDocs awarded US$ 100,000 Dubai World Expo grant
Posted 5-Dec-2019 16:00



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.