SSLlabls says "Unable to connect to the server" to my IPV6 IP

As title.

I followed this guide to enable IPV6 on my apache running on a CentOS 7.4…

https://www.cyberciti.biz/faq/ipv6-apac … -tutorial/">https://www.cyberciti.biz/faq/ipv6-apache-configuration-tutorial/

I added my IPV6 to the AAAA records of my Linode DNS Manager but SSLlables continue to say that it can't connect to my IPV6.

Any idea?

thanks

5 Replies

Without knowing your IPv6 address, it's difficult to even know where to begin.

(sent via PM)
@sblantipodi:

here the IPV6, thanks

[redacted]

First off, IP(v4/v6) addresses aren't private. Under Linode's current addressing scheme, there are only 16,777,216 valid addresses for a main IPv6 address in a given datacenter, so it wouldn't take long to find it.

Anyway, either your webserver isn't listening on IPv6, or your firewall isn't configured to allow it. Please provide the output of the following commands run as root (here, not in PM):

netstat -Wplant
iptables-save

Edit note: after sblantipodi reported this message, staff edited out his IPv6 address, even though it's available elsewhere easily

@dwfreed:

(sent via PM)
@sblantipodi:

here the IPV6, thanks

First off, IP(v4/v6) addresses aren't private. Under Linode's current addressing scheme, there are only 16,777,216 valid addresses for a main IPv6 address in a given datacenter, so it wouldn't take long to find it.

Anyway, either your webserver isn't listening on IPv6, or your firewall isn't configured to allow it. Please provide the output of the following commands run as root (here, not in PM):

netstat -Wplant
iptables-save

probably I don't want to match my IP with my username?

if I sent it via pvt means that I want to leave it private and not recorded on a public forum.

I don't think that there are so many idiots that tries 16 millions addresses to find mine.

In any case it seems that you haven't read my initial post. I followed that guide and my

netstat -tulpn | grep :80

shows both ipv4 and ipv6 listening on port 80

why iptables if ipv6 uses ipv6tables?

as I said, you will be kind if you can remove the ip from your quote.

I'm not going to. And yes, that was a slip-up, I meant ip6tables, not iptables. And show me the netstat anyway, because port 80 is not port 443.

@dwfreed:

I'm not going to. And yes, that was a slip-up, I meant ip6tables, not iptables. And show me the netstat anyway, because port 80 is not port 443.

I just understood why you don't work for linode anymore.

I don't need your help, thanks anyway.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct