<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 12pt; font-family: Verdana,Geneva,sans-serif'>
<p id="reply-intro">On 22/02/2025 18:32, B. Watson wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /><span style="white-space: nowrap;">Actually... if I understand how NAT64 and DNS64 work, he should be</span><br /><span style="white-space: nowrap;">able to connect to the IPv4 address if there's no AAAA record at all.</span></div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Not so sure about ftp, I confess its been 20 years since I've even skimmed over anything nat64 so I'd be honest and say I'm working off an aged memory :) we never had a need for it, but I'm sure I recall there was a problem with certain protocols and ftp was one? They may have come up with a solution to that by now, maybe they have and that's why Marco is trying to use it.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /><span style="white-space: nowrap;">See <a href="https://en.wikipedia.org/wiki/IPv6_transition_mechanism#DNS64" target="_blank" rel="noopener noreferrer">https://en.wikipedia.org/wiki/IPv6_transition_mechanism#DNS64</a></span><br /><br /><span style="white-space: nowrap;">DNS64 gives a 'synthetic' IPv6 address for a real IPv4 one, and NAT64</span><br /><span style="white-space: nowrap;">allows an IPv6-only host to connect to it.</span></div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">yes embedding 32b address inside it, and needs gateway set up correctly if any part of my memory is not muddying the waters.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /><span style="white-space: nowrap;">AFAICT, the problem is caused by us having an AAAA record, but not</span><br /><span style="white-space: nowrap;">really listening on the IPv6 address.</span></div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Oh, didn't realise that part, I just thought there was a failure of routing, bit strange giving it a 6 DNS address but not using it, not sure what daemon is used, we've used pure-ftpd since about 2000-ish and it just uses every interface, , maybe its just a firewall that needs altering? But sounds like the daemon requires it implicitly be set?</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /><span style="white-space: nowrap;">His machine doesn't think it needs to use DNS64/NAT64 because it</span><br /><span style="white-space: nowrap;">sees there's a real AAAA record, so it tries to connect to the real</span><br /><span style="white-space: nowrap;">IPv6 address, which gives 'connection refused'. If we got rid of the</span><br /><span style="white-space: nowrap;">AAAA record entirely, DNS64 and NAT64 would be used instead.</span></div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Makes sense, but why not just make sure its accepted rather than remove the 6 DNS :) Does Robby run it still? I'd like to ask him to change mailman too, but I'm thinking the version is not current enough to understand the changes, it's late Saturday night and you can guess what that means so I'll look in the morning hehe and if it meets requirements I'll shoot him off an email.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
</blockquote>
<p><br /></p>
<div id="signature">-- <br />
<p>Regards,<br />Noel Butler</p>
<p><br /></p>
</div>
</body></html>