From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <9front-bounces@9front.inri.net>
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.6 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,T_SCC_BODY_TEXT_LINE
	autolearn=ham autolearn_force=no version=3.4.4
Received: from 9front.inri.net (9front.inri.net [168.235.81.73])
	by inbox.vuxu.org (Postfix) with ESMTP id A71E526567
	for <ml@inbox.vuxu.org>; Sat,  3 Feb 2024 19:24:02 +0100 (CET)
Received: from mail.9lab.org ([168.119.8.41]) by 9front; Sat Feb  3 13:21:54 -0500 2024
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=9lab.org; s=20210803;
	t=1706984488;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=xMieGF/08TGLb1+3vvvQg/xNakZvek+FVRmvaR458vo=;
	b=PsV0j4SB3nnSFPLj93g6wcqGYsd09VsvaeCXWZpElqAcgNlhb+VU896S+ZY4XXz6zNYxmc
	8sx8qpiU1QcWTLbM48Hq3+1ouKsMtCv6H2xmOby3ArRSmdLmCVCyrR2a1kg8AoEWkYqGVa
	p/DuvUYXT7HRs091ruOZ0ZnIDBZfgrU=
Received: from rob.9lab.home (<unknown> [162.213.162.246])
	by mail.9lab.org (OpenSMTPD) with ESMTPSA id 446042a4 (TLSv1.2:ECDHE-RSA-CHACHA20-POLY1305:256:NO);
	Sat, 3 Feb 2024 19:21:28 +0100 (CET)
Message-ID: <5C4DC27D67F57D53A645D16E277BBA25@9lab.org>
To: 9front@9front.org
CC: igor@9lab.org
Date: Sat, 03 Feb 2024 19:21:26 +0100
From: igor@9lab.org
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: advanced enhancement TOR over XMPP service replication-scale element session optimizer 
Subject: [9front] ipv6 configuration
Reply-To: 9front@9front.org
Precedence: bulk

I am trying to expose my 9front server via ipv6 in addition to ipv4.
The main reason for doing this is because mail servers that are backed
by IPv6 have a higher score and I would like to move my mail server
from obsd to 9front eventually.

Unfortunately my knowledge about ipv6 is very limited and I hope one
of you has a working setup/snippet from /lib/ndb/local that could be
shared.

Here is what I have in /lib/ndb/local with the IPv6 entry
at the bottom:

<snip>
  # -- system: localhost
  sys=localhost dom=localhost ip=127.0.0.1  
  
  # -- authentication server to be used
  auth=mux authdom=9lab
  
  # -- network (uniquely identified by 'ip' and 'ipmask')
  ipnet=9lab ip=45.132.244.0 ipmask=255.255.252.0 ipgw=45.132.244.1
  	dom=9lab.org
  	dns=46.38.225.230
  	auth=mux
  	
  # -- system: mux IPv4  (IP:45.132.244.17/22 GW:45.132.244.1)
  sys=mux  dom=mux.9lab.org  ip=45.132.244.17 ether=6a822e1fa13e
  
  # -- system: mux6 IPv6 (IP:2a03:4000:48:2e::/64 GW:fe80::1)
  sys=mux6 dom=mux6.9lab.org ipv6=2a03:4000:48:2e::1 ether=6a822e1fa13e
</snap>

The domain name is setup correctly. Reverse DNS works as well
so that can't be an issue.

Here is the output of netaudit:

cpu% netaudit
	env var $sysname=mux looks ok
checking this host's tuple:
	sys=mux looks ok
	ip=45.132.244.17 looks ok
	dom=mux.9lab.org looks ok
	ether=6a822e1fa13e looks ok
checking the network tuple:
	we are in  ipnet=9lab
	ipgw=45.132.244.1 looks ok
	dns=46.38.225.230 does not reply to ping
	auth=mux looks ok
	no fs= entry (needed for tls boot)



I can't ping the host via ipv6; surely I am forgeting something obvious.

Thanks in advance for any hints.

Cheers,
Igor