www.eftps.gov contact

Jared Mauch jared at puck.nether.net
Tue Dec 18 16:24:11 CET 2012


Seems to work for me.. perhaps a local ipv6 issue for you?

puck:~$ curl -6 -v https://www.eftps.gov
* About to connect() to www.eftps.gov port 443 (#0)
*   Trying 2620:10f:400e:a::12... connected
* Connected to www.eftps.gov (2620:10f:400e:a::12) port 443 (#0)
* Initializing NSS with certpath: /etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using SSL_RSA_WITH_3DES_EDE_CBC_SHA
* Server certificate:
* 	subject: CN=www.eftps.gov,OU=nwics-o,O=Bank of America Corporation,L=Charlotte,ST=North Carolina,C=US
* 	start date: Sep 05 00:00:00 2012 GMT
* 	expire date: Sep 05 23:59:59 2013 GMT
* 	common name: www.eftps.gov
* 	issuer: CN=VeriSign Class 3 Secure Server CA - G3,OU=Terms of use at https://www.verisign.com/rpa (c)10,OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US
> GET / HTTP/1.1
> User-Agent: curl/7.21.0 (x86_64-redhat-linux-gnu) libcurl/7.21.0 NSS/3.12.10.0 zlib/1.2.5 libidn/1.18 libssh2/1.2.4
> Host: www.eftps.gov
> Accept: */*
> 
< HTTP/1.1 302 Found
< Date: Tue, 18 Dec 2012 15:22:36 GMT
< Server: IBM_HTTP_Server
< Location: /eftps/
< Vary: Accept-Encoding
< Content-Length: 259
< Content-Type: text/html; charset=iso-8859-1
< Set-Cookie: NSC_XXX.FGUQT.HPW-443-VTOJQ-WJQ6=ffffffff09fe7b0445525d5f4f58455e445a4a42fec6;path=/;secure;httponly
< 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="/eftps/">here</a>.</p>
<hr>
<address>IBM_HTTP_Server at www.eftps.gov Port 51446</address>
</body></html>
* Connection #0 to host www.eftps.gov left intact
* Closing connection #0



puck:~$ curl -6 -v https://www.eftps.gov/eftps/
* About to connect() to www.eftps.gov port 443 (#0)
*   Trying 2620:10f:400e:a::12... connected
* Connected to www.eftps.gov (2620:10f:400e:a::12) port 443 (#0)
* Initializing NSS with certpath: /etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using SSL_RSA_WITH_3DES_EDE_CBC_SHA
* Server certificate:
* 	subject: CN=www.eftps.gov,OU=nwics-o,O=Bank of America Corporation,L=Charlotte,ST=North Carolina,C=US
* 	start date: Sep 05 00:00:00 2012 GMT
* 	expire date: Sep 05 23:59:59 2013 GMT
* 	common name: www.eftps.gov
* 	issuer: CN=VeriSign Class 3 Secure Server CA - G3,OU=Terms of use at https://www.verisign.com/rpa (c)10,OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US
> GET /eftps/ HTTP/1.1
> User-Agent: curl/7.21.0 (x86_64-redhat-linux-gnu) libcurl/7.21.0 NSS/3.12.10.0 zlib/1.2.5 libidn/1.18 libssh2/1.2.4
> Host: www.eftps.gov
> Accept: */*
> 
< HTTP/1.1 200 OK
< Date: Tue, 18 Dec 2012 15:22:43 GMT
< Server: IBM_HTTP_Server
< OPTR_CXT: 01000100002e9401b0-6d84-4eb9-959e-82a40ac71c36f92c7175-8257-4b70-a110-0b1e4bf174d71                                   HTTP    ;
< Set-Cookie: JSESSIONID=0000cxrZRk6SNMwE3Pb3wuqd4S5:15ag68e1c; Path=/; Secure
< Expires: Thu, 01 Dec 1994 16:00:00 GMT
< Cache-Control: no-cache="set-cookie, set-cookie2"
< Vary: Accept-Encoding
< Transfer-Encoding: chunked
< Content-Type: text/html
< Content-Language: en
< Set-Cookie: NSC_XXX.FGUQT.HPW-443-VTOJQ-WJQ6=ffffffff09fe7b0445525d5f4f58455e445a4a42fec6;path=/;secure;httponly
< 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">



- Jared

On Dec 18, 2012, at 10:07 AM, Darren Pilgrim wrote:

> The hostname www.eftps.gov has both A and AAAA records, but the site is only reachable via IPv4.  Worse, the IPv6 connectivity is broken in such a way that Firefox and Internet Explorer do not fall back to IPv4. Tracing is broken for both protocols.  The 10-net addresss in the IPv4 path were cute.
> 
> Calling their technical support was an exercise in futility.  Supposedly they forwarded messages on to the right people; but the site is still broken after over a week's wait.  If someone knows the admins behind the EFTPS website and can forward this to them, the accounting firm for which I work would appreciate it.
> 
> Thanks,



More information about the ipv6-ops mailing list