cdhowie / netflix-no-ipv6-dns-proxy Goto Github PK

I think this is a problem with twisted names rather than this code, but reporting it here in case any one else notices it.

I have set this up and can now access UK netfilx and play videos on windows 7 laptop while still accessing some ipv6 sites. However some ipv6 sites are now not accessible in a browser.
Sites that work
ipv6.google.com
ip6.me (reports my ipv6 address correctly)

Sites that dont work
http://loopsofzen.co.uk/

Also, http://ipv6-test.com/ now reports that I dont have ipv6 connectivity

DNS lookups from a cmd prompt work fine and going directly to the ipv6 address work

These sites work fine from an android client on the same network

root@esx2:/opt# ln -s /opt/netflix-no-ipv6-dns-proxy/netflix-no-ipv6-dns-proxy.service /etc/systemd/system/
root@esx2:/opt# systemctl enable netflix-no-ipv6-dns-proxy.service
Failed to execute operation: Too many levels of symbolic links

I saw your posts about using HE IPv6 to get access to netflix. I am in the same issue and found your tool seems not working now. Can you still use this?

I have this up and running on my network and now see UK content on netfilx from android client and on windows 7 via webpage (which is great as all of my devices connected to a TV are ipv4 only so actually getting this on android devices is now better)
However, when I try to play a video on android client, I get the 'you are using a proxy' error and cant view it
It works fine on windows 7 via a browser, and netfilx on ipv4 devices work fine, and I can cast from android device to play it on an ipv4 device

Great tool, thanks so much for whipping this up. Just a note for users of systems that default to python3 like Arch Linux. The script gives a typing error "builtins.TypeError: a bytes-like object is required, not 'str'
" when run under python3.

To install the right package do: pacman -S python2-twisted
Then edit server.py to use python2 in the first line.

I do not like the advice that the README gives to disable dnsmasq's DNS resolver for a few reasons. The first is the dnsmasq is able to enforce dnsmasq and for those using that, disabling it would be a regression in security. The second is that it is unnecessary because dnsmasq is able to forward DNS queries to netflix-no-ipv6-dns-proxy based on domain name. If netflix-no-ipv6-dns-proxy is running on 10.1.1.100, then this would be all that is needed to achieve forwarding for the TLDs and their subdomains:

server=/netflix.com/10.1.1.100
server=/nflximg.net/10.1.1.100
server=/nflxext.com/10.1.1.100
server=/nflxvideo.net/10.1.1.100

The third reason is that people using dnsmasq and the HE tunnel broker do not need to use netflix-no-ipv6-dns-proxy to unblock netflix. It turns out that a single line in dnsmasq is sufficient to enable netflix to work on my Apple TV and iPhone:

host-record=ios.nccp.netflix.com,0100::0

I confirmed that not only did things work, but the video traffic was going over IPv4 by observing that the traffic on my HE tunnel was 0 while verifying that netflix would stream.

dnsmasq does not support wildcarding for host-record, so I suspect that other platforms will need additional entries. I assembled a list after reading this article:

http://blog.chrislahaye.com/smart-dns-proxy-to-unblock-netflix-content/

host-record=android.nccp.netflix.com,0100::0
host-record=cbp.nccp.netflix.com,0100::0
host-record=ios.nccp.netflix.com,0100::0
host-record=playstation.nccp.netflix.com,0100::0
host-record=nintendo.nccp.netflix.com,0100::0
host-record=nrdp.nccp.netflix.com,0100::0
host-record=xbox.nccp.netflix.com,0100::0

It should not be hard to find out what the correct subdomain is for a given device if you use dnsmasq's log-queries option, force the device to use the dnsmasq server and grep the dnsmasq.log file for the nccp.netflix.com subdomain.

Anyway, I do not mean to dismiss the excellent work that @cdhowie has done here, but I think that advice for dnsmasq users should be different.

Can u pls confirm, is it still working ❔