From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io1-xd2d.google.com (mail-io1-xd2d.google.com [IPv6:2607:f8b0:4864:20::d2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 040D23B2A4; Sat, 21 Mar 2020 18:41:38 -0400 (EDT) Received: by mail-io1-xd2d.google.com with SMTP id c19so10202827ioo.6; Sat, 21 Mar 2020 15:41:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=BXpycgxg2OCIqNwRl3ePUQQfY5oXXxi5M8NgDIVwvuY=; b=kglMXmMDkD2o9kEN8+TgyY/T0unXLkFHoIMAYu0XMCm5dugWWN8HyUMoixTOvn1/15 AZ5CLTN6HN6Ju26fEoFfee52dTrwzVHSW8n/Cuvy2+WFkhdN15878Gq+5QgZsm+9f9z1 3FI/XSnwrVlhdwPp5TDRY/TSvRicS0erOUt4e7OSef7J+JRRrhORGNaUOrb54tl+GqoS nVmRPYpOb3TUWP7VaDBxHC8BssOldaMJU1ug8SQ0pgne48I0X/KS4KjmLxFe+rnc9Imt 6qgEeYmlib5aFJJB7nVEDMLbL3ZWACVa+Ge2521sBLBqDcJiPJTLClKmLtkwlkjVppUg mlWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=BXpycgxg2OCIqNwRl3ePUQQfY5oXXxi5M8NgDIVwvuY=; b=Jnx3skyTqDKJLkoAciekE6IrmVPCpaV3VZaGqiMNr29hW+ZvIPOaojqoCVCkGgSX5U bZZkm5/js73qLgNOZmUrSuZF+sBNEXX1hbuNSbPQzc6Q+PvvkLu+A2TVrOsS7FPORulv lqg5nIyrXIlEHWtbu1HxQEu0wKc1H+8CBr3FxXxVl035FwuuMeD8RqVfK4Agjh85YItR 1P7IdVCzL5pyXe47pIbvudpINFD3IEgROF3Z7JYKK2oass/tmSKle6NpEjUlKh2ylk7X 7OYvlrS4tQokkcTIrXeLWFYcnzVhbfCSJ017JUnDEK4sgD/Qvi77iMuQnkKpZ8krKVFS CiNg== X-Gm-Message-State: ANhLgQ0eivyHX5cMEQ0yszWjigyfFt/OCCyrdXxLoIYnfwtntGzgkY+K WfviocrMP5RRsWTKxAoIWn89jJr3t7PkMJ2fYnQ= X-Google-Smtp-Source: ADFU+vs+82KSazNE84KmP0sWRsFtpQXBcwEzitPOemzmXBXOO5aZXhOR9NgUzOxMraICMAvx3lu3A7Kwet1CklRyO08= X-Received: by 2002:a02:b09c:: with SMTP id v28mr13836973jah.82.1584830497402; Sat, 21 Mar 2020 15:41:37 -0700 (PDT) MIME-Version: 1.0 References: <54620DA1-1B6B-456E-990E-3C99B6779887@gmx.de> In-Reply-To: <54620DA1-1B6B-456E-990E-3C99B6779887@gmx.de> From: Dave Taht Date: Sat, 21 Mar 2020 15:41:19 -0700 Message-ID: To: Sebastian Moeller Cc: Rich Brown , cerowrt-devel , bloat Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [Bloat] [Cerowrt-devel] OT: Netflix vs 6in4 from HE.net X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Mar 2020 22:41:38 -0000 Per the url I posted earlier you can stick something like this into /etc/firewall.user ip -6 route add blackhole 2406:da00:ff00::/96 # AWS ip -6 route add blackhole 2607:FB10::/32 ip -6 route add blackhole 2620:0:ef0::/48 ip -6 route add blackhole 2a00:86c0::/32 I actually used "unreach" and put it in /etc/config/networks config 'route6' 'killnetflix61' option 'interface' 'lan' option 'target' '2406:da00:ff00::/96' option 'type' 'unreachable' option 'proto' '50' ... etc... I then used the proto 50 bit (requires ip-full), to make babel pick it up = with a redistribute proto 50 line. (I use this also to propigate /22s around for ipv4) Neither approach is something "joe user" will be able to do. But it turned out to be essentially just as much work to just propigate my native /60s to the entire campus network statically and try to work out what new securi= ty holes I'd introduced. I have 22 APs to renumber if I get renumbered, and a few dns entries. On Sat, Mar 21, 2020 at 3:14 PM Sebastian Moeller wrote: > > Hi Rich, > > since it seems to be IPv6 related, why not use firefox for netflix and di= sable IPv6 in firefox (see https://support.mozilla.org/en-US/kb/firefox-can= t-load-websites-other-browsers-can#w_ipv6) maybe that works well enough? > > Best Regards > Sebastian > > > > > > On Mar 21, 2020, at 21:20, Rich Brown wrote: > > > > to Bloat & CeroWrt folks: This is a little OT for either of these lists= , but I figured there are plenty of experts here, and I would be delighted = to get your thoughts. > > > > I just tried to view a Netflix movie and got a F7111-5059 error message= . This prevented the video from playing. (As recently as a month or two ago= , it worked fine.) > > > > Googling the error message gets to this page https://help.netflix.com/e= n/node/54085 that singles out use of an IPv6 Proxy Tunnel. > > > > Sure enough, I'm have a 6in4 tunnel through Hurricane Electric on WAN6.= Stopping that WAN6 interface caused Netflix to work. > > > > What advice could you offer? (I could, of course, turn off WAN6 to watc= h movies. But that's a drag, and other family members couldn't do this.) Ma= ny thanks. > > > > Rich > > _______________________________________________ > > Bloat mailing list > > Bloat@lists.bufferbloat.net > > https://lists.bufferbloat.net/listinfo/bloat > > _______________________________________________ > Cerowrt-devel mailing list > Cerowrt-devel@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cerowrt-devel --=20 Make Music, Not War Dave T=C3=A4ht CTO, TekLibre, LLC http://www.teklibre.com Tel: 1-831-435-0729