As a side note in regards to Comcast and many other ISPs around the
globe...
For those who are using the ipip mesh many ISPs prohibit in their
router/modem firmware access to the various watchdog timer settings.
This actually breaks ipencap because the watchdog timers will kill any
encap sockets and prohibit incoming requests to your ipencap IPs.
I wrote a whitepaper on this issue which includes some tests one can run
to see if they're (as I call it) bitten by the watchdog and it also
offers ways around this. You can read the whitepaper here:
https://uronode.n1uro.com/linux/amprcable.html
I went through a 3 year battle with Comcast on this issue when they kept
saying they don't filter ipencap/ip protocol 4 - and it's true they
don't. What they don't tell you is that their supplied equipment does. I
did get an engineer at Cisco (I had a cisco at the time supplied by
Comcast) go through their specification sheet and he did verify that
Comcast's specs call for omitting disabling/adjusting the socket
watchdog timer in the menu.
Not all deployed Comcast modem/routers have this issue but in time when
they do a firmware upgrade on you in the middle of the night you'll
think things are broken so if you're not affected now, give it time.
--
If Confucius were alive today:
"A computing device left in the OFF power state never crashes"
-----
73 de Brian N1URO
IPv6 Certified
SMTP:
n1uro-at-n1uro.ampr.org