[AusNOG] Request: Contact for DEEWR in regards to IPv6 access to https://ecsn.gov.au/ Website

[Karl Auer]

On Sun, 2013-03-31 at 13:00 +1100, Reuben Farrelly wrote:
> http://ecsn.gov.au/
> 
> It works fine if you connect to https:// via IPv4, but not if it 
> resolves to the IPv6 address.

Has two addresses, as you say. The IPv6 address has no PTR record. The
IPv4 address has a PTR record that points to a name that has no forward
record: "idc4.deewr.gov.au". "www.ecsn.gov.au" is a CNAME for
ecsn.gov.au.

Going to the address literals results in an SSL setup error (fair
enough). Going to the name but forcing one or the other protocol gets me
a 403 error (forbidden). Important point here is that there is an entity
answering HTTPS for both protocols.

So for me it doesn't work at all, i.e., it doesn't "work fine...via
IPv4" :-) However, if you have some sort of special cert, or are on some
whitelisted IPv4 address or whatever, it may work for you.

Certainly something to be taken up with the website administrator in the
first instance.

Regards, K.
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer                                          tel: +61-2-64957435
Into6 - IPv6 design, support, training             mob: +61-428-957160
www.into6.com.au        twitter.com/intosix         kauer at into6.com.au
GPG/PGP fingerprint: D8A4 A65A EE32 286F 1E36 55A4 0901 EEAF A785 1684
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20130331/0c578cb5/attachment.sig>