IPV6

Discussion in 'Installation/Configuration' started by Robin.k, Jan 29, 2021.

  1. Robin.k

    Robin.k Member

    Hi,

    I'm using ISPconfig 3.22 on a Debian 10. I run a website and use IPV4, everything works with ipv4.
    Now I want to switch to IPV6. But I can't reach my website anymore.
    When I use the command "ifconfig" in the terminal I see the IPV6 global address.
    When I put this address in the browser http://[2002:xxxe:xxx:8:0:c62c:3ff:fe02:dbb7] I only reach the "Apache2 Debian Default Page" but not reach my website. When I set the DNS record AAAA with the address "2002:xxxe:xxx:8:0:c62c:3ff:fe02:dbb7" with my domain name xxx.com I can't reach my website with my Domain name.

    Who can help me to reach my website with IPV6

    Thanks
    Robin
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    In the panel, go to System -> Server IP addresses and check if the IPv6 address is listed there. If not, add it. That should look like this: upload_2021-1-29_11-25-49.png
    Then, go to the settings for your web, and make sure it listens on your IPv4 and IPv6 address.
     
  3. Robin.k

    Robin.k Member

    Hi, thanks for the info.
    I have done the settings as above.
    Now I can view my website locally with http://[2002:xxxe:xxx:8:0:c62c:3ff:fe02:dbb7] however through public it won't work.
    Maybe some tips? How to test where it goes wrong?
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Maybe you have a different public IP?
     
  5. Robin.k

    Robin.k Member

    I found the problem, but can't solve it.
    The browser safari is blocking my website, because the Lets encrypt certificate is not good.
    With the browser Opera I can see my website with https://mydomain.com
    I didn't change the LE certificate. But with ipv4 it works fine but not with ipv6?
    So I tried uncomment SLL and LE in ISPconfig, after it, I comment SLL and LE in ISPconfig, but LE isn't check in ISPconfig.
    Is the actual LE certificate only for ipv4? and not for IPv6? do i have to renew the LE when I switch to IPv6?
    Wat is wrong that I can't renew the LE certificate.
     
  6. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Let's Encrypt Certificate does not certify IP-address. So it does not matter what IP-address you use.
     
  7. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Can you share the domain so we can check what's the issue?
     
  8. Robin.k

    Robin.k Member

    Yes, no problem.
     
    Last edited: Jan 31, 2021
  9. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Which version of MacOS do you have installed? Seems like a local issue, from my testing it works fine.
     
  10. Robin.k

    Robin.k Member

    Version Big Sur
    With browser Opera standard (from my own IP) I can't reach my website, but when I switch to VPN somewhere else in Europe I can reach the website. Also With VPN with ip from Amerika I can reach the website. But with a VPN Ip from from Asia I can't reach reach the website.
     
    Last edited: Jan 30, 2021
  11. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    I think that if you test this on any different device on any different network it will work. From my testing, it seems to work properly.
     
  12. Steini86

    Steini86 Active Member

    Sounds like a DNS cache problem. Either you wait for 48 hours, or you flush your DNS cache.
    For your mac this is done via
    Code:
    sudo killall -HUP mDNSResponder
    . If you are using the DNS of your local router, you have to flush this. Sometimes this is not so easy, you can then change your DNS server to some other like 1.1.1.1
     
  13. Robin.k

    Robin.k Member

    Problem Solved
    Hi, thanks for the info. Tried everything above with no succes. But the problem was in the Fritzbox 7530 Modem.

    DNS Rebind Protection
    Your FRITZ! Box suppresses DNS responses that point to IP addresses in your own home network (DNS Rebind Protection). Here you can specify an exception for which DNS Rebind protection should not apply. To do so, enter the complete host name (domain name including subdomain) in the list.

    After apply the domain name in DNS Rebind Protection, I can reach my website also from my own IP address.
     
    ahrasis and till like this.

Share This Page