<div dir="ltr">> My guess is that when you create the instance, it is willing to use any outbound IPv4 address, but as soon as you add a pool4, it restricts to that, and since I only put one port (80/tcp) into it, everything else got closed off. Am I right about that?<br><br>Yes, that's exactly what's happening. [0]<br><br>> # Then put ALL ports of the gateway's IPv4 address into the pool4<br><br>Just be aware that, if you add the entire 100.127.255.253 address to Jool, Linux will not be reliably able to use it for anything else. If the node doesn't have any other IPv4 address, you might want to leave some room for the ephemeral range. [1]<br><br>[0] <a href="https://jool.mx/en/usr-flags-pool4.html#empty-pool4">https://jool.mx/en/usr-flags-pool4.html#empty-pool4</a><br>[1] <a href="https://jool.mx/en/usr-flags-pool4.html#port-range">https://jool.mx/en/usr-flags-pool4.html#port-range</a></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Feb 19, 2021 at 9:05 AM Art Cancro via Jool-list <<a href="mailto:jool-list@nic.mx">jool-list@nic.mx</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_2463218134152938629WordSection1">
<p class="MsoNormal">I think I got it working, but if someone could tell me whether this is "correct" or if there's a better way, I would appreciate it; or if this is the best way then it could be added to the documentation.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"># First create the instance and set up the pool6<u></u><u></u></p>
<p class="MsoNormal">jool instance add --netfilter --pool6 xxxx:xxxx::/96<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"># Then put ALL ports of the gateway's IPv4 address into the pool4<u></u><u></u></p>
<p class="MsoNormal">jool pool4 add --tcp 100.127.255.253 1-65535<u></u><u></u></p>
<p class="MsoNormal">jool pool4 add --udp 100.127.255.253 1-65535<u></u><u></u></p>
<p class="MsoNormal">jool pool4 add --icmp 100.127.255.253 1-65535<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"># At this point, I can create static BIB entries<u></u><u></u></p>
<p class="MsoNormal">jool bib add --tcp 2607:f8b0:4002:c02::8a#80 100.127.255.253#80<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">My guess is that when you create the instance, it is willing to use any outbound IPv4 address, but as soon as you add a pool4, it restricts to that, and since I only put one port (80/tcp) into it, everything else got closed off. Am I right
about that?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Again, many thanks; jool is solving a LOT of problems in my data centers.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">-- Art<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0in 0in">
<p class="MsoNormal"><b>From:</b> Jool-list <<a href="mailto:jool-list-bounces@nic.mx" target="_blank">jool-list-bounces@nic.mx</a>> <b>On Behalf Of
</b>Art Cancro via Jool-list<br>
<b>Sent:</b> Thursday, February 18, 2021 6:48 PM<br>
<b>To:</b> Alberto Leiva <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>><br>
<b>Cc:</b> <a href="mailto:jool-list@nic.mx" target="_blank">jool-list@nic.mx</a><br>
<b>Subject:</b> Re: [Jool-list] DNAT "port mapping" through jool? [EXTERNAL]<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Manual entry to bib table looks like the right approach. I tried it today. 100.127.255.253 is the interface on the IPv4 side of my jool machine, and we are successfully doing NAT64 of a /96 block towards the IPv4 side...<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">So as a test I am trying to see if we can get clients who connect to 100.127:255:253#80 to get the HTTP server at 2607:f8b0:4002:c02::8a#80 (which is google, but again it's just a test)<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">So the command appears to be:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">jool bib add --tcp 2607:f8b0:4002:c02::8a#80 100.127.255.253#80<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">And the error response is:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Error: The kernel module returned error 22: The transport address '100.127.255.253#80' does not belong to pool4. Please add it there first.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">So I tried:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">jool pool4 add --tcp 100.127.255.253 80<u></u><u></u></p>
<p class="MsoNormal">jool bib add --tcp 2607:f8b0:4002:c02::8a#80 100.127.255.253#80<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">This works for outbound connections, but it broke the NAT64 inbound connections.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Does jool support pool6 IPv6-->IPv4 and manual bib IPv4-->IPv6 at the same time?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b>From:</b> Alberto Leiva <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>> <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Woops, I meant<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">sudo jool bib add cafe::1#80 203.0.113.1#80<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Feb 17, 2021 at 12:29 PM Alberto Leiva <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0in 0in 0in 6pt;margin:5pt 0in 5pt 4.8pt">
<div>
<div>
<p class="MsoNormal">Try<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">sudo jool bib add <Address of IPv6 server>#<Port of IPv6 server> <IPv4 address of Jool>#<Port of Jool mask><u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-left:11.55pt">sudo jool bib add cafe::1#80 <a href="https://urldefense.com/v3/__http:/203.0.113.1:80__;!!LG9nLpOADg!B0yOLRqgb1DOljIz2V9bEd4Mmh0WJBBI_7SohIfZjT5ahPhvAWSGwHfF995pmBnNuw$" target="_blank">
203.0.113.1:80</a><u></u><u></u></p>
</div>
<div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0in 0in 0in 6pt;margin:5pt 0in 5pt 4.8pt">
<p class="MsoNormal"><u></u> <u></u></p>
</blockquote>
</div>
</blockquote>
</div>
</div>
</div>
_______________________________________________<br>
Jool-list mailing list<br>
<a href="mailto:Jool-list@nic.mx" target="_blank">Jool-list@nic.mx</a><br>
<a href="https://mail-lists.nic.mx/listas/listinfo/jool-list" rel="noreferrer" target="_blank">https://mail-lists.nic.mx/listas/listinfo/jool-list</a><br>
</blockquote></div>