Thanks for the input guys! Sounds like it might be an issue with my tunnel then. I had problems getting to a few sites last week (http://www.dslreports.com/forum/r27265527-IPV6-Issues-Facebook-and-Engadget) and HE resolved the issue pretty quickly. I will ask them if they are aware of it. Thanks, Derek On 7/1/2012 9:35 PM, Frank Bulk wrote:

ICMP to www.comcast6.net has been blocked since 3:16 pm Central on 6/7/2012. But their site loads fine over port 80.

Frank

-----Original Message----- From: Derek Ivey [mailto:derek@derekivey.com] Sent: Sunday, July 01, 2012 6:28 PM To: nanog@nanog.org Subject: Comcast's IPv6 Information Site Unreachable

Anyone else having trouble getting to Comcast's IPv6 Information site? It appears to be unreachable over IPv6.

[root@server ~]# ping6 comcast6.net PING comcast6.net(speedlab-app05.newcastlerdc.de.panjde.comcast.net) 56 data bytes From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=0 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=1 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=2 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=3 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=4 Destination unreachable: Administratively prohibited ^C --- comcast6.net ping statistics --- 5 packets transmitted, 0 received, +5 errors, 100% packet loss, time 4008ms

[root@server ~]# traceroute6 comcast6.net traceroute to comcast6.net (2001:558:fe16:7:69:252:216:215), 30 hops max, 40 byte packets 1 pfsense.d3r3k.net (2001:470:8:d15::1) 0.278 ms 0.282 ms 0.317 ms 2 2001:470:7:d15::1 (2001:470:7:d15::1) 20.794 ms 24.746 ms 28.569 ms 3 gige-g4-12.core1.ash1.he.net (2001:470:0:90::1) 28.946 ms 29.124 ms 29.144 ms 4 as6453.gige-g3-16.core1.ash1.he.net (2001:470:0:191::2) 28.917 ms 28.936 ms 28.097 ms 5 if-ae2.2.tcore2.AEQ-Ashburn.ipv6.as6453.net (2001:5a0:600:500::1) 28.059 ms 31.771 ms 57.135 ms 6 2001:5a0:600:500::72 (2001:5a0:600:500::72) 28.959 ms 2001:559::31d (2001:559::31d) 29.041 ms 29.060 ms 7 pos-3-11-0-0-cr01.ashburn.va.ibone.comcast.net (2001:558:0:f5a4::1) 32.553 ms 19.810 ms 16.526 ms 8 2001:558:0:f669::2 (2001:558:0:f669::2) 39.019 ms 37.954 ms 36.368 ms 9 2001:558:0:f57f::1 (2001:558:0:f57f::1) 67.134 ms 67.151 ms 67.166 ms 10 pos-2-7-0-0-cr01.denver.co.ibone.comcast.net (2001:558:0:f54d::1) 81.571 ms 81.507 ms 81.569 ms 11 2001:558:0:f744::2 (2001:558:0:f744::2) 80.633 ms 80.760 ms 79.825 ms 12 2001:558:d0:33::1 (2001:558:d0:33::1) 104.686 ms 105.060 ms 105.040 ms 13 te-3-1-ur03.cmc.co.ndcwest.comcast.net (2001:558:d0:5::1) 104.335 ms 103.962 ms 104.068 ms 14 te-3-1-ur03.cmc.co.ndcwest.comcast.net (2001:558:d0:5::1) 104.492 ms !X 104.597 ms !X 104.999 ms !X

Thanks, Derek

Someone replied to my DSL Reports thread: http://www.dslreports.com/forum/r27289866- Apparently there is an ACL issue with their load balancer that is blocking ICMP and causing PMTU issues for people who use tunnels. http://www.dslreports.com/forum/r27226136- <http://www.gossamer-threads.com/lists/nsp/ipv6/34197> It looks like it's been going on since June 11. It's strange that Comcast hasn't resolved the issue by now. Thanks, Derek On 7/1/2012 10:20 PM, Jimmy Hess wrote:

On 7/1/12, Derek Ivey <derek@derekivey.com> wrote:

...

Anyone else having trouble getting to Comcast's IPv6 Information site? It appears to be unreachable over IPv6. Looks like just ICMP that's broken.

~# telnet comcast6.net 80 Trying 2001:558:fe23:2:69:252:208:135... Connected to comcast6.net (2001:558:fe23:2:69:252:208:135). Escape character is '^]'. HEAD / HTTP/1.1 Host: comcast6.net User-Agent: Telnet

HTTP/1.1 200 OK Date: Mon, 02 Jul 2012 02:21:33 GMT Server: Apache/2.2.15 (Red Hat) X-Powered-By: PHP/5.3.3 Set-Cookie: 1a3c31c9847a772452af472ce0afd5f3=5hcm2m506se424huah4eo5lvo7; path=/ P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Cache-Control: no-cache Pragma: no-cache Connection: close Content-Type: text/html; charset=utf-8

Connection closed by foreign host.

~# ping6 comcast6.net PING comcast6.net(speedlab-app05.newcastlerdc.de.panjde.comcast.net) 56 data bytes From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=0 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=1 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=2 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=3 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=4 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=5 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=6 Destination unreachable: Administratively prohibited From te-4-1-ur01.newcastlerdc.de.panjde.comcast.net icmp_seq=7 Destination unreachable: Administratively prohibited

--- comcast6.net ping statistics --- 8 packets transmitted, 0 received, +8 errors, 100% packet loss, time 6999ms