Page 2 of 2

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 11th, 2016, 9:08 am
by sander
jgmtfia:
1) can you run plain (unpatched) SABnzbd 1.0.0 RC1 or higher without the VPN running? I expect that to work.

2) can you do

Code: Select all

mtr -nrc2 ipv6.google.com
on the seedbox without and with the VPN running, and post both outputs here? It will make what your seedbox environment does with IPv6

3) can you disable IPv6 on your Linux, and retest with plain (unpatched) SABnzbd 1.0.0 RC1 or higher, with and without the VPN running? See http://www.g-loaded.eu/2008/05/12/how-t ... nd-centos/ for tips.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 1:25 am
by jgmtfia
sander wrote: seedbox ... I've the idea it's an account on a machine (so: not a VPS), and thus you cannot freely use all ports.
You know, it's not really clear to me what it is. The concept was a curiosity to me so I signed up for a month.
sander wrote: VPN ... very well possible that jgmtfia's VPN only does IPv4
The openvpn config is out of my control, and not really visible.
sander wrote: About jgmtfia's IPv6: 2620:b8:4000:1000::90:0 = columbia.whatbox.ca. I'm assuming that is the seedbox provider, and NOT the VPN provider. Correct, jgmtfia?
Correct. The VPN is between whatbox and a local machine. The goal is not to have open ports on a public interface. IT just felt wrong, an generally not a good idea.
sander wrote: If so, the seeedbox is providing the IPv6 (possibly behind NAT), and possibly the VPN is only doing IPv4, leaving the IPv6 in place on another interface ... :(
Something I did notice is that sabnzbd did declare that "My local IPv4 address = 192.131.44.90" and "My IPv6 address = 2620:b8:4000:1000::90:0", which it true, but should be irrelevant given the invocation was --server 10.8.0.1:9833, the local VPN endpoint.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 3:35 am
by sander
OK. Can you also followup on the items in https://forums.sabnzbd.org/viewtopic.ph ... 15#p104842 ? Thanks.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 5:22 am
by jgmtfia
sander wrote:OK. Can you also followup on the items in https://forums.sabnzbd.org/viewtopic.ph ... 15#p104842 ? Thanks.
Sorry missed that post:

1) can you run plain (unpatched) SABnzbd 1.0.0 RC1 or higher without the VPN running? I expect that to work.

No VPN running, runs normally without edits.

Code: Select all

git clone  https://github.com/sabnzbd/sabnzbd.git Untouched
git checkout tags/1.0.0RC4 -b 1.0.0RC4
python ~/Untouched/SABnzbd.py  -f ~/.sabnzbd/sabnzbd.ini -b0 --server :9833 --https 9835 --logging=2
...
2016-03-12 10:11:52,203::DEBUG::[SABnzbd:1266] My local IPv4 address = 192.131.44.90
2016-03-12 10:11:52,323::DEBUG::[SABnzbd:1274] Could not determine my public IPv4 address
2016-03-12 10:11:52,323::DEBUG::[SABnzbd:1278] My IPv6 address = 2620:b8:4000:1000::90:0
...
can you do mtr -nrc2 ipv6.google.com on the seedbox without and with the VPN running, and post both outputs here? It will make what your seedbox environment does with IPv6
No mtr, used tracert6

With VPN

Code: Select all

traceroute6 ipv6.google.com
traceroute to ipv6.google.com (2607:f8b0:4009:80b::200e), 30 hops max, 80 byte packets
 1  hosted-by.whatbox.ca (2620:b8:4000:1000::1)  0.254 ms  0.229 ms  0.212 ms
 2  ash-b1-link.telia.net (2001:2000:3080:2f9::1)  1.413 ms  1.578 ms  1.694 ms
 3  google-ic-316845-ash-b1.c.telia.net (2001:2000:3080:f05::2)  0.958 ms  0.864 ms  0.925 ms
 4  2001:4860::1:0:9ff (2001:4860::1:0:9ff)  2.208 ms 2001:4860::1:0:3d49 (2001:4860::1:0:3d49)  2.004 ms 2001:4860::1:0:9ff (2001:4860::1:0:9ff)  2.253 ms
 5  2001:4860::8:0:6374 (2001:4860::8:0:6374)  1.929 ms 2001:4860::8:0:8f9e (2001:4860::8:0:8f9e)  1.715 ms  1.776 ms
 6  2001:4860::8:0:8458 (2001:4860::8:0:8458)  32.371 ms 2001:4860::8:0:833f (2001:4860::8:0:833f)  24.463 ms 2001:4860::8:0:8458 (2001:4860::8:0:8458)  24.335 ms
 7  2001:4860::1:0:84a0 (2001:4860::1:0:84a0)  24.657 ms  25.368 ms  24.048 ms
 8  2001:4860:0:1::117d (2001:4860:0:1::117d)  24.471 ms  24.524 ms  24.450 ms
 9  ord30s22-in-x0e.1e100.net (2607:f8b0:4009:80b::200e)  24.265 ms  24.347 ms  24.261 ms
Without VPN

Code: Select all

raceroute6 ipv6.google.com
traceroute to ipv6.google.com (2607:f8b0:4009:80b::200e), 30 hops max, 80 byte packets
 1  hosted-by.whatbox.ca (2620:b8:4000:1000::1)  0.232 ms  0.244 ms  0.272 ms
 2  ash-b1-link.telia.net (2001:2000:3080:2f9::1)  1.664 ms  1.797 ms  1.944 ms
 3  google-ic-316845-ash-b1.c.telia.net (2001:2000:3080:f05::2)  0.933 ms  0.923 ms  0.909 ms
 4  2001:4860::1:0:9ff (2001:4860::1:0:9ff)  1.923 ms  1.992 ms  2.061 ms
 5  2001:4860::8:0:6374 (2001:4860::8:0:6374)  1.786 ms 2001:4860::8:0:8f9f (2001:4860::8:0:8f9f)  24.846 ms 2001:4860::8:0:6374 (2001:4860::8:0:6374)  1.768 ms
 6  2001:4860::8:0:8458 (2001:4860::8:0:8458)  34.252 ms  24.327 ms 2001:4860::8:0:833f (2001:4860::8:0:833f)  24.482 ms
 7  2001:4860::1:0:84a0 (2001:4860::1:0:84a0)  24.609 ms  24.689 ms  24.648 ms
 8  2001:4860:0:1::117d (2001:4860:0:1::117d)  24.433 ms  24.480 ms  24.458 ms
 9  ord30s22-in-x0e.1e100.net (2607:f8b0:4009:80b::200e)  24.374 ms  24.240 ms  23.756 ms

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 5:44 am
by sander
#1: OK, as expected: SAB works without the VPN

#2: Conclusion:
- whatbox does provide ipv6
- the vpn does not influence ipv6 (which is a pity as that's causing the problem, IMHO)


And did you see question #3 (so: no ipv6 on linux level)?

EDIT:

Oh, wait: you can only do that if you're root. Are you root on your seedbox? I guess not.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 1:43 pm
by jgmtfia
sander wrote: And did you see question #3 (so: no ipv6 on linux level)?
EDIT:
Oh, wait: you can only do that if you're root. Are you root on your seedbox? I guess not.
To confirm, I did miss that question and I don't have root.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 2:01 pm
by sander
OK. What do you want now? Further investigation to solve this (which will take time from you and me), or note this as a known problem?

If I could reproduce this problem on my system, it would be easier, but I can't; I tried to set up two different IPv4 VPN's, but I can't get them working.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 12th, 2016, 6:42 pm
by jgmtfia
sander wrote:OK. What do you want now? Further investigation to solve this (which will take time from you and me), or note this as a known problem?

If I could reproduce this problem on my system, it would be easier, but I can't; I tried to set up two different IPv4 VPN's, but I can't get them working.
Recording as an open problem and directing people to the two short hacks is better than nothing.

Re: Sabnzbd on seedbox with GUI binding to openvpn endpoint

Posted: March 13th, 2016, 12:38 pm
by sander
FWIW:

I can NOT reproduce the problem on a system with 1) a VPN (OpenVPN towards vpnbook, ipv4-only) and 2) IPv6 and 3) SABnzbd 1.0.0. RC5:

Default startup: SABnzbd listens on IPv4 only, seen by netstat. I can't via the public IPv4 address, as it's unreachable (behind VPN's NAT)
Startup with "./SABnzbd.py -s anyhost6 --ipv6_hosting 1": SABnzbd listens on IPv6.

So let's keep it this way, until someones can reproduce and/or analyze it.