What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?

Seidel, Michael
Hi List!

Could somebody please clarify which filename I should choose for certificates in MULTI_IP = YES setup in case of IPv6?

⇒ /etc/pki/tls/exim_tls/exim.MY_IP.key

What’s $MY_IP in the case of this example:

1) FE80:0000:0000:0000:0202:B3FF:FE1E:8329
2) FE80::0202:B3FF:FE1E:8329
3) FE80::202:B3FF:FE1E:8329

Is it always 1) because computer do not short it, EVER?
/etc/pki/tls/exim_tls/exim.FE80:0000:0000:0000:0202:B3FF:FE1E:8329.key  ?

Kind Regards,

Michael Seidel
System Administrator
FAI rent-a-jet AG
http://www.fai.ag

_______________________________________________
users mailing list
[hidden email]
https://exim4u.org/mailman/listinfo/users
Reply | Threaded
Open this post in threaded view
|

Re: What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?

gldickens3
Administrator
On 06/02/2015 10:34 AM, Seidel, Michael wrote:

> Hi List!
>
> Could somebody please clarify which filename I should choose for certificates in MULTI_IP = YES setup in case of IPv6?
>
> ⇒ /etc/pki/tls/exim_tls/exim.MY_IP.key
>
> What’s $MY_IP in the case of this example:
>
> 1) FE80:0000:0000:0000:0202:B3FF:FE1E:8329
> 2) FE80::0202:B3FF:FE1E:8329
> 3) FE80::202:B3FF:FE1E:8329
>
> Is it always 1) because computer do not short it, EVER?
> /etc/pki/tls/exim_tls/exim.FE80:0000:0000:0000:0202:B3FF:FE1E:8329.key  ?
>

Hi Michael,

The MULTI-IP capabilities were developed and tested for IPv4. That's not
to say that it would not work for IPv6, however, I have not tested
MULTI-IP with IPv6 and am not aware of anybody else who has tested it.
So, to be honest, I am not certain that it works or not.  Nevertheless,  
IPv6 obviously needs to be addressed and sorted out since it is indeed
the future for DNS.  However, the reality is that, up to now, very few
mail servers are using IPv6 so there has not been much of a need yet to
sort these issues out.

To give you a more direct answer to your question; the IP address that
is used by Exim4U is the DNS lookup for the domain name.  So, my first
stab at answering your question would be to do a DNS lookup for the
domain with the "nslookup" or "dig" command and then try the same IPv6
syntax as the results.

Gordon


_______________________________________________
users mailing list
[hidden email]
https://exim4u.org/mailman/listinfo/users
Reply | Threaded
Open this post in threaded view
|

Re: What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?

Seidel, Michael
In reply to this post by Seidel, Michael
Hello Gordon, Hello List,

Thank you very much for the hint about the DNS Lookup, I will set it up and test it and come back to you with some data.

IMHO: pushing the problem because of few mail servers use it won't help :-) If nobody addresses IPv6 "problems" and quirks nobody going to use it, ever.

Kind Regards,

Michael Seidel
System Administrator
FAI rent-a-jet AG
http://www.fai.ag

>-----Ursprüngliche Nachricht-----
>Von: users [mailto:[hidden email]] Im Auftrag von Gordon Dickens
>Gesendet: Dienstag, 2. Juni 2015 23:17
>An: Exim4U General Discussion
>Betreff: Re: [Exim4U] What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?
>
>On 06/02/2015 10:34 AM, Seidel, Michael wrote:
>> Hi List!
>>
>> Could somebody please clarify which filename I should choose for certificates in MULTI_IP = YES setup in case of IPv6?
>>
>> ⇒ /etc/pki/tls/exim_tls/exim.MY_IP.key
>>
>> What’s $MY_IP in the case of this example:
>>
>> 1) FE80:0000:0000:0000:0202:B3FF:FE1E:8329
>> 2) FE80::0202:B3FF:FE1E:8329
>> 3) FE80::202:B3FF:FE1E:8329
>>
>> Is it always 1) because computer do not short it, EVER?
>> /etc/pki/tls/exim_tls/exim.FE80:0000:0000:0000:0202:B3FF:FE1E:8329.key  ?
>>
>
>Hi Michael,
>
>The MULTI-IP capabilities were developed and tested for IPv4. That's not to say that it would not work for IPv6, however, I have not tested MULTI-IP with IPv6 and am not aware of anybody else who has >tested it.
>So, to be honest, I am not certain that it works or not.  Nevertheless,
>IPv6 obviously needs to be addressed and sorted out since it is indeed the future for DNS.  However, the reality is that, up to now, very few mail servers are using IPv6 so there has not been much of a need >yet to sort these issues out.>
>
>To give you a more direct answer to your question; the IP address that is used by Exim4U is the DNS lookup for the domain name.  So, my first stab at answering your question would be to do a DNS lookup >for the domain with the "nslookup" or "dig" command and then try the same IPv6 syntax as the results.
>
>Gordon

_______________________________________________
users mailing list
[hidden email]
https://exim4u.org/mailman/listinfo/users