Newsservers with IPv6

I'm quite impressed by the amount of newsservers with IPv6 on port 563 or 119:

news.alibis.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
news.atlantisnews.com has IPv6 2001:4de0:401:7::147 with succesful connect on port 563
news.bulknews.eu has IPv6 2a02:d28:10:1c:0:407:ff02:164 with succesful connect on port 563
news.cheapnews.eu has IPv6 2a02:d28:10:1b:0:431:ff02:164 with succesful connect on port 563
block.cheapnews.eu has IPv6 2a02:d28:10:1b:0:431:ff02:165 with succesful connect on port 563
news.easynews.com has IPv6 2001:4de0:401:7::170 with succesful connect on port 119
news.iload-usenet.com has IPv6 2001:4de0:1::222 with succesful connect on port 119
news.newsdemon.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
eu.newsdemon.com has IPv6 2001:4de0:401:7::147 with succesful connect on port 563
us.newsdemon.com has IPv6 2001:4de0:2101:119e::23 with succesful connect on port 119
eu.newsgroup-binaries.com has IPv6 2001:4de0:1::236 with succesful connect on port 119
secure.newsgroup-binaries.com has IPv6 2001:4de0:2101:119e::22 with succesful connect on port 563
news.newsgroupdirect.com has IPv6 2001:4de0:401:7::147 with succesful connect on port 563
us.newsgroupdirect.com has IPv6 2001:4de0:2101:119e::23 with succesful connect on port 563
news.panic.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
news.prepaid-usenet.de has IPv6 2001:4de0:1::236 with succesful connect on port 119
news.redorbnews.com has IPv6 2001:4de0:2101:119e::20 with succesful connect on port 119
eu.redorbnews.com has IPv6 2001:4de0:1::236 with succesful connect on port 119
news.shemes.com has IPv6 2001:4de0:1::222 with succesful connect on port 119
news.simonews.com has IPv6 2001:4de0:1::222 with succesful connect on port 119
reader.snelnl.com has IPv6 2001:4de0:401:7::147 with succesful connect on port 563
news.snelnl.com has IPv6 2001:4de0:1::236 with succesful connect on port 119
secure.thenewsgroups.com has IPv6 2001:4de0:2101:119e::22 with succesful connect on port 563
news.thundernews.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
eu.thundernews.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
us.thundernews.com has IPv6 2001:4de0:2101:119e::22 with succesful connect on port 563
secure.eu.thundernews.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
secure.us.thundernews.com has IPv6 2001:4de0:2101:119e::23 with succesful connect on port 119
news.tigerusenet.com has IPv6 2001:4de0:2101:119e::23 with succesful connect on port 563
news.usenetnewsserver.com has IPv6 2001:4de0:401:7::146 with succesful connect on port 563
news.xlusenet.nl has IPv6 2001:4de0:1::222 with succesful connect on port 119
secure.xlusenet.nl has IPv6 2001:4de0:401:7::147 with succesful connect on port 563
news.xs4all.nl has IPv6 2001:888:0:4::119 with succesful connect on port 119
eu.z51.biz has IPv6 2001:4de0:1::236 with succesful connect on port 119

So ... domains with functional newsservers on ipv6:

alibis.com
atlantisnews.com
bulknews.eu
cheapnews.eu
easynews.com
iload-usenet.com
newsdemon.com
newsgroup-binaries.com
newsgroupdirect.com
panic.com
prepaid-usenet.de
redorbnews.com
shemes.com
simonews.com
snelnl.com
thenewsgroups.com
thundernews.com
tigerusenet.com
usenetnewsserver.com
xlusenet.nl
xs4all.nl
z51.biz

KPN op 4,65% IPv6 deployment

Zo, mooie score van KPN: op 4,65% IPv6 deployment (meting september 2015). En "deployment" betekent hier daadwerkelijk gebruik, dus tot op computer/tablet die het daadwerkelijk gebruikt.

KPN had in april 2015 (5 maanden geleden) nog geen IPv6 deployment (tenminste: blijkbaar minder dan 0.00%). Zie http://ipv6-or-no-ipv6.blogspot.nl/2015/04/ipv6-deployment-by-isps-in-netherlands.html

Ziggo zit op 0,17%, dus dat schiet niet op.

One-liner om de gegevens te achterhalen van http://www.worldipv6launch.org/measurements/

$ lynx --dump "http://www.worldipv6launch.org/apps/ipv6week/measurement/timeline-nets.html" | egrep -i -e "kpn|ziggo|xs4all|solcon|telfort|upc|zeeland" | awk '{ print $2 " " $NF }' | sort -u -k2,2 -r

XS4ALL 53.69%
KPN 4.65%
ZeelandNet 3.71%
Solcon 3.52%
Ziggo 0.17%

Chrome on Linux does not use teredo IPv6?

What happened? It seems Chrome and Chromium on Linux don't use IPv6 if the IPv6 is provided by teredo / miredo.

Everything works in Firefox, Miredo, lynx, ping6, etc with ipv6.google.com.

It looks like Chromium does not do a IPv6 DNS lookup; if I use a literal IPv6 address, it still works in Chromium.

I'm quite sure it all worked earlier on. Is Chrome/Chromium going the Windows way, so "if teredo, do not lookup IPv6 addresses"?

Check IPv6 enabled tracker in torrent

Here's an ugly oneliner to see if a torrent has IPv6 enabled trackers in it:

$ strings ubuntu-14.04.2-desktop-amd64.iso.torrent | head -1 | tr '/' '\n' | awk -F: ' $1 ~ /\./ { print "host -t aaaa "  $1 }' | /bin/sh | grep -vi "has no AAAA"

ipv6.torrent.ubuntu.com is an alias for ubuntuv6tracker.bit.nl.
ubuntuv6tracker.bit.nl has IPv6 address 2001:7b8:3:37::21:3

So, yes, this torrent has an IPv6 enabled tracker.

I got this torrent from http://ipv6.torrent.ubuntu.com/, which only works via IPv6.

Openwrt: Allow all incoming IPv6 traffic

I run OpenWrt Barrier Breaker 14.07 on my router. Default it blocks all incoming IPv6 traffic. To accept all incoming IPv6 traffic, I did this:

In the file /etc/firewall.user put this:

ip6tables -F
ip6tables -X
ip6tables -A INPUT -p icmpv6 -j ACCEPT
ip6tables -P INPUT ACCEPT
ip6tables -P OUTPUT ACCEPT
ip6tables -P FORWARD ACCEPT

Saven and exit. Then

/etc/init.d/firewall restart

And that's it! All my IPv6 hosts are open to Internet.

Starting Nmap 6.40 ( http://nmap.org ) at 2015-07-11 12:05 CEST
Nmap scan report for 2001:bad:cafe::1
Host is up (0.0055s latency).
Not shown: 988 closed ports
PORT     STATE    SERVICE
22/tcp   open     ssh
25/tcp   filtered smtp
80/tcp   open     http
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
6666/tcp filtered irc
6667/tcp filtered irc
6668/tcp filtered irc
6669/tcp filtered irc
7000/tcp filtered afs3-fileserver
8080/tcp open     http-proxy
9999/tcp filtered abyss

Nmap done: 1 IP address (1 host up) scanned in 18.02 seconds

As that's a bit too much, I'll now close down the firewall a bit.

IPv6 Newsservers

Based on http://ipv6-or-no-ipv6.blogspot.com/2015/05/newsprovider-xsnews-offers-ipv6-access.html I wrote an oneliner to find out Xsnews resellers that provide IPv6 NNTP access. Oneliner plus result:

$ python lusje.py | awk '{ print "./nntptester.py " $1 }' | /bin/sh  | grep -vi unconfigured | grep -i -B1 -e "^200"


Newsserver is 2001:67c:174:101:0:65:ff02:1
200 Welcome to Usenet2go
--
Newsserver is 2001:67c:174:101:0:65:ff02:121
200 Welcome to Astinews
--
Newsserver is 2001:67c:174:101:0:65:ff02:122
200 Welcome to Newsxs
--
Newsserver is 2001:67c:174:101:0:65:ff02:126
200 Welcome to Bullcat
--
Newsserver is 2001:67c:174:101:0:65:ff02:129
200 Welcome to Unet
--
Newsserver is 2001:67c:174:101:0:65:ff02:131
200 Welcome to XS News
--
Newsserver is 2001:67c:174:101:0:65:ff02:132
200 Welcome to I-Telligent
--
Newsserver is 2001:67c:174:101:0:65:ff02:133
200 Banner Welcome to Aviteo Ltd DE
--
Newsserver is 2001:67c:174:101:0:65:ff02:135
200 Welcome to Its Hosted

Better formatting

To get a better formatting, I fed the above list into another oneliner:

$ cat xsnews-resellers-with-ipv6.txt  | grep -vi "\-\-" | awk ' /Newsserver/ { print $NF } /Welcome/ { print substr($0,4+index($0," to ")) }'  | paste - - -d' '

2001:67c:174:101:0:65:ff02:1 Usenet2go
2001:67c:174:101:0:65:ff02:121 Astinews
2001:67c:174:101:0:65:ff02:122 Newsxs
2001:67c:174:101:0:65:ff02:126 Bullcat
2001:67c:174:101:0:65:ff02:129 Unet
2001:67c:174:101:0:65:ff02:131 XS News
2001:67c:174:101:0:65:ff02:132 I-Telligent
2001:67c:174:101:0:65:ff02:133 Aviteo Ltd DE
2001:67c:174:101:0:65:ff02:135 Its Hosted

So, if you have an account with one of these news providers, you can now access them via IPv6. And if these resellers do not publish a FQDN for their IPv6 newsserver, you can just fill out the IPv6 address in your IPv6 capable newsreader (like SABnzbd)

Newsprovider Xsnews offers IPv6 access

Nice: Newsprovider Xsnews (www.xsnews.com) offers IPv6 access via its news server readeripv6.xsnews.nl.


$ telnet readeripv6.xsnews.nl nntp
Trying 2001:67c:174:101:0:65:ff02:131...
Connected to readeripv6.xsnews.nl.
Escape character is '^]'.
200 Welcome to XS News
quit
205 Bye. 24 bytes written, 0 accounted.
Connection closed by foreign host.

I did a download test, and got line speed (100 Mbps).

Further analysis

readeripv6.xsnews.nl has IPv6 address 2001:67c:174:101:0:65:ff02:131
reader.xsnews.nl has address 94.232.116.131

Note the last "131" ... that is probably the link.

Xsnews is a wholesaler offering its services to resellers. The list on https://vergelijkusenetproviders.nl/usenet-provider-lijst/ shows the resellers of Xsnews.

Aeton XSNews
AstiNews XSNews
Bulknews XSNews
EasyUsenet XSNews
Easynews XSNews
Gebruikhet XSNews
NewsConnection XSNews
NewsGrabber XSNews
NewsXS XSNews
Power News XSNews
SimplyUsenet XSNews
SMSUsenet XSNews
SnelNL XSNews
SSL-News XSNews
Surfino XSNews
Usebits XSNews
Usenet2Go XSNews
Usenet4U XSNews
UsenetBucket XSNews
UsenetXL XSNews
Wondernews XSNews
XsNews XSNews
YabNews XSNews

So let's check Yabnews:

news.yabnews.nl has address 94.232.116.127

So same IP address as reader.xsnews.nl, except the last byte: 127 instead of 131. So let's check the 'corresponding' IPv6:

$ telnet 2001:67c:174:101:0:65:ff02:127 nntp

Trying 2001:67c:174:101:0:65:ff02:127...

Connected to 2001:67c:174:101:0:65:ff02:127.

Escape character is '^]'.

200 Welcome to an unconfigured NNTP server.

quit

205 Bye. 45 bytes written, 0 accounted.

Connection closed by foreign host.

Bingo. Still "unconfigured NNTP server", but probably reserved for Yabnews.

Old free service ... not anymore

FWIW: in the old days, Xsnews offered free access IPv6, but that NNTP server is not providing news services anymore:


$ telnet reader.ipv6.xsnews.nl nntp
Trying 2001:67c:174:101::1337...
Connected to reader.ipv6.xsnews.nl.
Escape character is '^]'.
500 Thank you for testing IPv6. XSNews now offers IPv6 on all packages. Register now at www.xsnews.com
Connection closed by foreign host.

Note the subtle difference: readeripv6.xsnews.nl versus reader.ipv6.xsnews.nl ... so just one dot.