6to4 relay at AS26943 (Your.org) blackholing >1280B traffic

Pekka Savola pekkas at netcore.fi
Mon Feb 25 18:27:19 CET 2008


Hi,

Today I noticed that traffic that goes through a relay one of my colo 
server ISP's uses appears to be blackholing traffic through their 6to4 
relay that's bigger than 1280 bytes.  ICMPv6 Packet too Big message is 
not returned..

The 6to4 relay in question appears to reside at AS26943 (Your.org). 
Please fix it ASAP.

Doesn't work:

$ traceroute6 gap.netcore.fi 1233
traceroute to gap.netcore.fi (2002:5872:3460::1), 30 hops max, 1233 byte packets
  1  netcore-gw.ipv6.eunet.fi (2001:670:86:3001::2)  42.421 ms  64.049 ms  86.363 ms
  2  ge0-0-0-997.bbr1.esp1.fi.v6.eunetip.net (2001:670:3:8::1)  110.243 ms  132.744 ms  156.872 ms
  3  as0-0.bbr1.sto1.se.v6.eunetip.net (2001:670:3:4::116)  186.145 ms  210.207 ms  232.000 ms
  4  2001:670:3:4::2be (2001:670:3:4::2be)  288.465 ms  310.417 ms  334.752 ms
  5  ge-0.3.0.core1.ams.bb6.your.org (2001:7f8:1::a502:6943:1)  356.609 ms  380.748 ms  403.406 ms
  6  * * *

Works:

$ traceroute6 gap.netcore.fi 1232
traceroute to gap.netcore.fi (2002:5872:3460::1), 30 hops max, 1232 byte packets
  1  netcore-gw.ipv6.eunet.fi (2001:670:86:3001::2)  40.147 ms  64.671 ms  91.880 ms
  2  ge0-0-0-997.bbr1.esp1.fi.v6.eunetip.net (2001:670:3:8::1)  111.293 ms  133.066 ms  157.701 ms
  3  as0-0.bbr1.sto1.se.v6.eunetip.net (2001:670:3:4::116)  185.953 ms  209.308 ms  232.101 ms
  4  2001:670:3:4::2be (2001:670:3:4::2be)  288.335 ms  309.986 ms  344.195 ms
  5  ge-0.3.0.core1.ams.bb6.your.org (2001:7f8:1::a502:6943:1)  357.126 ms  382.098 ms  403.501 ms
  6  2002:5872:3460::1 (2002:5872:3460::1)  438.259 ms !X  442.325 ms !X  443.619 ms !X

Distributed looking glass of who appear to be affected:

http://www.sixxs.net/tools/grh/lg/?when=now&year=2008&month=02&day=25&hour=18&show=allpaths&format=html&report_grhwork=on&report_grhfail=on&findtype=prefix&find=2002%3A%3A%2F16

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the ipv6-ops mailing list