search for: sin6_port

....0.1 and rule check not working is ::ffff:127.0.0.1. I am using the following versions, compiled today (5/31). libnftnl-1.0.6-x86_64-1 nftables-e049f92bb7b98dfa218eda2b9b6f14506238abf2-x86_64-1 Without flags interval: socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 5 connect(5, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(5, {sa_family=AF_INET6, sin6_port=htons(45890), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 connect(5, {sa_family=AF_UNSPEC,...

...39; and 'myaddr' have the > > same AF, however the above patch only cannonizes 'myaddr'. Ultimately this > > results in the daemon attempting to use a socket with two address families and > > fails: > > > > recvmsg(0, {msg_name(28)={sa_family=AF_INET6, sin6_port=htons(34500), inet_pton(AF_INET6, "::ffff:10.0.0.192", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, msg_iov(1)=[{"\0\1pxelinux.0\0netascii\0", 65468}], msg_controllen=40, {cmsg_len=36, cmsg_level=SOL_IPV6, cmsg_type=, ...}, msg_flags=0}, 0) = 22 > > [..] > > [...

...ticed very long running yum updates. I think that happened because firewall is dropping outgoing packets to port 80. Well, I thought to mitigate the issue and changed outgoing from drop to reject. Now I try manually # strace telnet 2a02:180:ffff:1::551f:b966 80 ... connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, "2a02:180:ffff:1::551f:b966", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28 3 second delay ) = -1 ECONNREFUSED (Connection refused) ... The ECONNREFUSED is quite expected of course, but what is not expected that the connect syscall lasts 3 second...

...D|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7fcc0c8) = 5967 [...SNIP...] [pid 5967] execve("/opt/openssh/sbin/sshd", ["/opt/openssh/sbin/sshd", "-p", "24", "-R"], [/* 25 vars */]) = 0 [...SNIP...] [pid 5967] getpeername(3, {sa_family=AF_INET6, sin6_port=htons(4040), inet_pton(AF_INET6, "::ffff:82.36.183.26", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 [...SNIP...] [pid 5967] getpeername(3, {sa_family=AF_INET6, sin6_port=htons(4040), inet_pton(AF_INET6, "::ffff:82.36.183.26", &sin6_addr), sin6_flowinfo=...

...doesn't exist? This can happen in linux-vserver.org guest or on a pure Linux system with net.ipv6.conf.all.disable_ipv6 sysctl set to 1. That how it looks under strace: 28636 10:33:49 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 6 <0.000020> 28636 10:33:49 connect(6, {sa_family=AF_INET6, sin6_port=htons(6493), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EAD DRNOTAVAIL (Cannot assign requested address) <0.000020> 28636 10:33:49 connect(6, {sa_family=AF_UNSPEC, sa_data="\0\0\0\0\0\0\0\0\0\0\0\0\0\0"}, 16) = 0 <0.000019&gt...

...24) = 1024 read(4, "\n# and 10.3 in RFC 3484. The"..., 1024) = 301 read(4, "", 1024) = 0 close(4) = 0 munmap(0xb7f83000, 4096) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET6, sin6_port=htons(873), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(4, {sa_family=AF_INET6, sin6_port=htons(35626), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 connect(4, {sa_family=AF_UNS...

...yaddr' have the >>> same AF, however the above patch only cannonizes 'myaddr'. Ultimately this >>> results in the daemon attempting to use a socket with two address families and >>> fails: >>> >>> recvmsg(0, {msg_name(28)={sa_family=AF_INET6, sin6_port=htons(34500), inet_pton(AF_INET6, "::ffff:10.0.0.192", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, msg_iov(1)=[{"\0\1pxelinux.0\0netascii\0", 65468}], msg_controllen=40, {cmsg_len=36, cmsg_level=SOL_IPV6, cmsg_type=, ...}, msg_flags=0}, 0) = 22 >>> [..] >>...

...------->8-----fake-socket.h--starting-at-line-28------- #ifndef HAVE_STRUCT_IN6_ADDR struct in6_addr { u_int8_t s6_addr[16]; <------ line 30 }; #endif /* !HAVE_STRUCT_IN6_ADDR */ #ifndef HAVE_STRUCT_SOCKADDR_IN6 struct sockaddr_in6 { unsigned short sin6_family; u_int16_t sin6_port; u_int32_t sin6_flowinfo; struct in6_addr sin6_addr; <------- line 39 }; #endif /* !HAVE_STRUCT_SOCKADDR_IN6 */ ---------8<------------------------------------------- which would appear to have the requisite number of semicolons. When I comment out line 30, everything compiles...

..._sigaction(SIGCHLD, {0x80768c0, [], SA_NOCLDSTOP}, NULL, 8) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e196f8) = 7117 close(3) = 0 select(6, [4 5], NULL, NULL, NULL) = 1 (in [4]) accept(4, {sa_family=AF_INET6, sin6_port=htons(55783), inet_pton(AF_INET6, "xxxxxxxxxxxxxxx", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 3 rt_sigaction(SIGCHLD, {0x80768c0, [], SA_NOCLDSTOP}, NULL, 8) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e196f8) = 7123...

...gt; 11:41:52 fcntl(12, F_SETFL, O_RDWR|O_NONBLOCK) = 0 <0.000015> 11:41:52 fcntl(12, F_GETFD) = 0 <0.000016> 11:41:52 fcntl(12, F_SETFD, FD_CLOEXEC) = 0 <0.000015> 11:41:52 setsockopt(12, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0 <0.000018> 11:41:52 connect(12, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "2001:8b0:1627:1::2", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable) <0.000032> 11:41:52 close(12) = 0 <0.000028> 11:41:52 close(11) = 0 <0.000024> 11:41:52 close(10) = 0 <0.000020>...

...p;& + IN6_IS_ADDR_V4MAPPED((&((struct sockaddr_in6 *)&from)->sin6_addr))){ + struct in_addr addr; + u_int16_t port; + memcpy(&addr, ((char *)&((struct sockaddr_in6 *)&from)->sin6_addr)+12, + sizeof(addr)); + port = ((struct sockaddr_in6 *)&from)->sin6_port; + memset(&from, 0, sizeof(from)); + ((struct sockaddr_in *)&from)->sin_family = AF_INET; + memcpy(&((struct sockaddr_in *)&from)->sin_addr, &addr, sizeof(addr)); + ((struct sockaddr_in *)&from)->sin_port = port; + } +#endif + if (getnameinfo((struct sockaddr...

...3), sin_addr=inet_addr("202.158.214.106")}, 16) = 0 getsockname(3, {sa_family=AF_INET, sin_port=htons(36226), sin_addr=inet_addr("173.255.192.10")}, [16]) = 0 close(3) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 connect(3, {sa_family=AF_INET6, sin6_port=htons(873), inet_pton(AF_INET6, "2001:388:30bc:cafe::beef", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(42032), inet_pton(AF_INET6, "2600:3c00::f03c:91ff:fe96:cbca", &sin6_addr), sin6_flowinfo=0, sin6_scope_...

...backend=BIND9_DLZ ..... [pid 1533] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1533, si_status=SIGKILL, si_utime=0, si_stime=0} --- socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 5 setsockopt(5, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0 *connect(5, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "2001:1291:XXX:85Xa::66XX", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable)* ERROR(exception): uncaught exception - Failed to find a writeable DC for domain 'CENTRAL.DOMAIN.COM.BR' File "/usr/...

Hi, https://reductivelabs.com/trac/puppet/wiki/DocumentationStart https://reductivelabs.com/trac/puppet/wiki/PuppetIntroduction https://reductivelabs.com/trac/puppet/wiki/PuppetMasters https://reductivelabs.com/trac/puppet/wiki/PuppetBestPractice - Max

...addr=inet_addr("192.168.1.6")}, [16]) = 53 Process 1635 suspended [pid 1640] +++ killed by SIGKILL +++ Process 1635 resumed --- SIGCHLD (Child exited) @ 0 (0) --- socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 5 setsockopt(5, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0 connect(5, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "2001:xxxx:xxxx:xxxx::2", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable) ERROR(exception): uncaught exception - Failed to find a writeable DC for domain 'linex.r00t.la' File "/opt/samba4/lib/...

...backend=BIND9_DLZ ..... [pid 1533] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1533, si_status=SIGKILL, si_utime=0, si_stime=0} --- socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 5 setsockopt(5, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0 *connect(5, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "2008:29Y:XXX:85Xa::66XX", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable)* ERROR(exception): uncaught exception - Failed to find a writeable DC for domain 'CENTRAL.DOMAIN.COM.BR <http://com.br/>...

I was wondering what everyone's thoughts were on a simpler way to exclude addresses from having listeners on them. I know a lot of people have multiple subnets, especially larger corporations. Some networks are non-route-able, and therefor unsuitable for use with SSH, aside from communication between other servers on the same subnet. Given that we may want to exclude those non-route-able

Hi all. I'm just reporting some strange (fatal) behaviour when running rsync --daemon on an IPv6-enabled box. It gets a fatal error when trying to bind to the same address twice. strace output: bind(4, {sa_family=AF_INET6, sin6_port=htons(873), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 bind(5, {sa_family=AF_INET, sin_port=htons(873), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 listen(4, 5) = 0 listen(5, 5) = -1 EAD...

right now icecast2 listens to 0.0.0.0 by default if bind-address is not defined. it should rather listen to :: if ipv6 is available. the change is rather small. i do not know how that works on systems that do not support IPv6 yet. so i added #ifdef AF_INET6, is that the right way to check for ipv6? attached is a patch against http://svn.xiph.org/icecast/trunk/net/ if it is ok like that it would

...truct sockaddr_in *addr4 = (struct sockaddr_in *)&addr_6or4; + struct in_addr addr; + u_int16_t port; + + memcpy(&addr, ((char *)&addr6->sin6_addr) + 12, sizeof(addr)); + port = addr6->sin6_port; + + memset(&addr_6or4, 0, sizeof(addr_6or4)); + + addr4->sin_family = AF_INET; + memcpy(&addr4->sin_addr, &addr, sizeof(addr)); + addr4->sin_port = port; + } +...