[Sks-devel] Re: keys.hiif.hu drops connections at port 11370

[Kiss Gabor (Bitman)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Eygene et al.

> I am experiencing problems with connecting to keys.niif.hu's
> recon port:

Thank you for the notice.
I found this in my recon log:

2011-04-04 14:24:23 address for pgp.codelabs.ru:11370 changed from [] to [<ADDR_
INET [144.206.177.99]:11370>]
[...]
2011-04-04 14:32:57 Reconciliation attempt from unauthorized host <ADDR_INET 
[::ffff:144.206.177.99]:22154>.  Ignoring

As far as I can see the problems started 3 days ago when I reconfigured
sks to accept connection on IPv6 too:

- -----------------
# Set hkp binding address
#hkp_address: 0.0.0.0
hkp_address: ::
- -----------------

Tipical log entries before enabling ipv6:
2011-04-04 05:44:22 Reconciliation attempt from unauthorized host <ADDR_INET 
[89.16.173.11]:37428>.  Ignoring
2011-04-04 05:52:24 Reconciliation attempt from unauthorized host <ADDR_INET 
[99.29.220.28]:59925>.  Ignoring
2011-04-04 12:34:47 Reconciliation attempt from unauthorized host <ADDR_INET [76
.185.39.178]:41281>.  Ignoring
2011-04-04 11:30:04 Reconciliation attempt from unauthorized host <ADDR_INET [99
.25.27.31]:60186>.  Ignoring

After the reconfiguration similar log lines appeared containing
the following addresses:

[::ffff:76.185.39.178]          keyserver.gingerbear.net
[::ffff:78.129.148.7]           sks.powdarrmonkey.net           (ipv6 capable)
[::ffff:83.160.105.236]         pgpkeys.mallos2.nl              (ipv6 capable)
[::ffff:85.113.243.78]          keyserver.nijkamp.net           (ipv6 capable)
[::ffff:88.217.187.21]          keyserver.nausch.org
[::ffff:89.16.173.11]           (unknown host)
[::ffff:91.189.89.31]           barbadine.canonical.com
[::ffff:91.194.60.2]            keyserver.fr                    (ipv6 capable)
[::ffff:94.142.241.93]          sks-peer.spodhuis.org           (ipv6 capable)
[::ffff:99.25.27.31]            (unknown host)
[::ffff:144.206.177.99]         pgp.codelabs.ru
[::ffff:145.100.185.229]        minsky.surfnet.nl               (ipv6 capable)
[::ffff:161.53.2.219]           pks.aaiedu.hr
[::ffff:208.84.222.190]         ice.mudshark.org
[::ffff:209.234.253.170]        zimmermann.mayfirst.org
[::ffff:212.112.235.78]         keys.wuschelpuschel.org         (ipv6 capable)
[::ffff:213.161.224.2]          keys.kfwebs.net                 (ipv6 capable)
[::ffff:213.239.210.122]        sks.pkqs.net

That means all my peers except keyserver.stack.nl
plus 2 unknown hosts.

It seems I made some mistake in sks config.
Could you suggest what to change?

Thanks

Gabor
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iEYEARECAAYFAk2dorkACgkQd2oiOrtquziGSACg7WbdXn35qeX1nzd+IRthH+RX
CtAAoObuVqdd87RkjrO/GxAbVWVgrTgG
=v+vM
-----END PGP SIGNATURE-----