Adding IPv6 is not going as planned

AeroBytes

New member
Joined
Feb 25, 2025
Messages
3
Hi!

So i ran my server on IPv4. Now some clients hath trouble visiting websites. So i added IPv6.
Now they get a "Forbidden" error.

The way i added IPv6 to DirectAdmin is:
- Ran ip a too see if IPv6 was available (inet6 2a01:4f8:c2c:e049::1/64 scope global)
- went to Admin Settings > IP Management
- Added IP: 2a01:4f8:c2c:e049::1/64
- Edited the IPv6, added Linked IP to main IPv4 IP
- Checked if AAAA records where set.

Now Hetzner says 2a01:4f8:c2c:e049::/64m but IP a says 2a01:4f8:c2c:e049::1/64. Also DA made from the ::1 address this:
2a01:4f8:c2c:e049:0:0:0:1


Also tried adding the IPv6 to the users as an aditional IP but that doesnt work eather.


1743699835836.png
 
- Edited the IPv6, added Linked IP to main IPv4 IP
I think you did this the wrong way.
Unlink he ip there, because if you edit the ipv6 then you link the ipv4 to your ipv6.

You have to edit your ipv4 and then in there link your ipv6 to your ipv4.

After that, aaa records should be set and things should be working.
 
Hello,

There is something really wrong:

Bash:
[~]# curl -i  http://78.47.239.19
HTTP/1.1 200 OK
Date: Sun, 06 Apr 2025 06:22:08 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Mon, 10 Jun 2024 12:59:39 GMT
ETag: "2f-61a88b8d49144"
Accept-Ranges: bytes
Content-Length: 47
Vary: User-Agent
Content-Type: text/html

<html>webserver is functioning normally</html>
[~]#

Bash:
[~]# curl -i  http://[2a01:4f8:c2c:e049::1]
HTTP/1.1 403 Forbidden
Date: Sun, 06 Apr 2025 06:22:17 GMT
Server: Apache/2
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>
[~]#

it seems as Richard has already identified, the IPv4/IPv6 should be re-linked.


says 2a01:4f8:c2c:e049::/64m but IP a says 2a01:4f8:c2c:e049::1/64.

The IPv6 2a01:4f8:c2c:e049:: = 2a01:4f8:c2c:e049::0
According to my tests your server responds only on IPv6 2a01:4f8:c2c:e049::1
 
Additionally, if you also want to send mail from that server, remember to put an rDNS/PTR record on the 2a01:4f8:c2c:e049::1 ip too.
 
Back
Top