IPv6 only Jails cannot connect to the outside world

William A. Mahaffey III wam at hiwaay.net
Mon Oct 5 13:39:03 UTC 2015


On 10/05/15 03:24, Niklaas Baudet von Gersdorff wrote:
> My resolv.conf in every jail:
>
>> >root at ipv6only:~ # cat /etc/resolv.conf
>> >search financecomm.com
>> >nameserver 213.133.98.98
>> >nameserver 213.133.99.99
>> >nameserver 213.133.100.100
>> >nameserver 2a01:4f8:0:a0a1::add:1010
>> >nameserver 2a01:4f8:0:a102::add:9999
>> >nameserver 2a01:4f8:0:a111::add:9898
> So, as you can see, I also have IPv4 and IPv6 nameservers in my resolv.conf.
>
>> >I don't bother mentioning ipv4 resolvers in resolv.conf, but the end
>> >result is that the test you were trying works fine:
>> >
>> >root at mns:~ # telnet google.com 80
>> >Trying 2607:f8b0:4004:807::1006...
>> >Connected to google.com.
>> >Escape character is '^]'.
>> >blort
>> >HTTP/1.0 400 Bad Request
>> ><snip>
> As in my original email, the above test I cannot confirm.
>
> Mentioning /etc/resolv.conf made me trying something else: I removed the
> IPv4 nameservers in it:
>
>> >root at ipv6only:~ # cat /etc/resolv.conf
>> >search financecomm.com
>> >nameserver 2a01:4f8:0:a0a1::add:1010
>> >nameserver 2a01:4f8:0:a102::add:9999
>> >nameserver 2a01:4f8:0:a111::add:9898
> And now my test works:
>
>> >root at ipv6only:~ # telnet google.com 80
>> >Trying 2a00:1450:4001:80d::100e...
>> >Connected to google.com.
>> >Escape character is '^]'
> Thus it seems that, in an IPv6 only jail, I may not list IPv4
> nameservers in /etc/resolv.conf because otherwise I get the weird error
> that it cannot resolve the hostname although it actually can? Is that
> intended?
>
> Probably I'm missing something.
>

I thought you were limited to a small number of entries in resolv.conf, 
3 by default (in my man page). If so, the 3 IPv4 entries were all that 
were searched when they were there & it never got to the IPv6 
nameservers. $0.02, no more, no less ....

-- 

	William A. Mahaffey III

  ----------------------------------------------------------------------

	"The M1 Garand is without doubt the finest implement of war
	 ever devised by man."
                            -- Gen. George S. Patton Jr.



More information about the freebsd-questions mailing list