0

So I'm trying to set up an Ubuntu server with the web application running on IPv6 using an Internal adapter. I honestly do not know what the issue is.

I've tried changing the adapter that is hosting the application, using IPv6 on different adapters, using various nmap and ping6 commands, using proxychain, etc.

This is what the ifconfig output looks like, where ens192 is the target adapter:

ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
    inet 10.72.251.25  netmask 255.255.255.0  broadcast 10.72.251.255
    inet6 fe80::20c:29ff:fedc:e661  prefixlen 64  scopeid 0x20<link>
    inet6 2001:db8::10:72:251:25  prefixlen 64  scopeid 0x0<global>
    ether 00:0c:29:dc:e6:61  txqueuelen 1000  (Ethernet)
    RX packets 88960  bytes 23821196 (23.8 MB)
    RX errors 0  dropped 42623  overruns 0  frame 0
    TX packets 13758  bytes 1752951 (1.7 MB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

ens192: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
    inet 192.168.0.46  netmask 255.255.255.0  broadcast 192.168.0.255
    inet6 fe80::20c:29ff:fedc:e66b  prefixlen 64  scopeid 0x20<link>
    inet6 2001:db8::192:168:0:46  prefixlen 64  scopeid 0x0<global>
    ether 00:0c:29:dc:e6:6b  txqueuelen 1000  (Ethernet)
    RX packets 1377  bytes 452806 (452.8 KB)
    RX errors 0  dropped 9  overruns 0  frame 0
    TX packets 1405  bytes 455068 (455.0 KB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

When I'm on the box, I am able to ping it from the ens160 adapter, as shown below:

root@box:/home/box# ping6 2001:db8::192:168:0:46
PING 2001:db8::192:168:0:46(2001:db8::192:168:0:46) 56 data bytes
64 bytes from 2001:db8::192:168:0:46: icmp_seq=1 ttl=64 time=0.022 ms
64 bytes from 2001:db8::192:168:0:46: icmp_seq=2 ttl=64 time=0.028 ms
^C
--- 2001:db8::192:168:0:46 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1022ms
rtt min/avg/max/mdev = 0.022/0.025/0.028/0.003 ms

In order to access it externally, I set up dynamic port forwarding using the following command:

ssh -fND 9050 bob@box

Within /etc/apache2/ports.conf I have included the following line:

Listen [2001:db8::192:168:0:46]:8081

The configuration of the etc/netplan/02-netcfg.yaml file is shown below:

network:
 version: 2
 renderer: networkd
 ethernets:
  ens160:
   addresses:
    - 10.72.251.25/24
    - 2001:db8::10:72:251:25/64
   dhcp4: no
   dhcp6: no
  ens192:
   addresses:
    - 2001:db8::192:168:0:46/64
    - 192.168.0.46/24
   dhcp4: no
   dhcp6: no
  ens224:
   addresses:
    - 192.168.0.48/24
   dhcp4: no

I am able to access the IPv4 adapter, but cannot access the IPv6 adapter as shown below:

proxychains nmap -6 -sT -Pn fe80::20c:29ff:fedc:e66b  -p8081 -I ens192
ProxyChains-3.1 (http://proxychains.sf.net)
WARNING: identscan (-I) no longer supported.  Ignoring -I
Starting Nmap 7.70 ( https://nmap.org ) at 2019-02-15 16:32 SAST
|DNS-request| fe80::20c:29ff:fedc:e66b 
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
|DNS-response| fe80::20c:29ff:fedc:e66b is 104.239.213.7
nmap: TargetGroup.cc:576: void NetBlockIPv6Netmask::set_addr(const sockaddr_in6*): Assertion `addr->sin6_family == AF_INET6' failed.
Aborted

The end goal is using proxychains (or similar) to access the website hosted on the internal adapter.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.