#nat64
FileZilla logs in but fails to retrieve directory listing (IPv6 / 522 error)
_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._ Your log shows FileZilla connecting through an IPv6 address, `64:ff9b::b91b:860b`. That’s a NAT64 address, which wraps an IPv4 address inside IPv6, and it decodes to `185.27.134.11`. So your network seems to be IPv6-only and translating to IPv4. The login works because the translator handles the control connection. The directory listing needs a second, separate connection, and FileZilla sets that up with `EPRT |2|…` using your IPv6 address. The server answers `522 Only IPv4 is supported`, so the listing fails. I didn’t find a topic or article about this exact combination, so this comes from reading your log. Our “Help, I cannot connect to FTP” article says a normal FileZilla log shows a line like `Connecting to 185.27.134.11:21...`. It also says you can enter that IP address as the FTP hostname. It suggests a VPN if your network restricts FTP connections. Help, I cannot connect to FTP File Management and FTP > Being able to access your hosting account over FTP is very important to manage your website files. However, there are reason why you may have trouble connecting to the FTP service. This article explains a few things you can try to fix your FTP connection. Login to your control panel After your account has been created, or reactivated after a suspension, you may need to login to the hosting control panel once to enable FTP access to your account. You can login to the control panel by logging in… Could you try one of these and tell me what the log shows? 1. Enter `185.27.134.11` as the host in FileZilla instead of the hostname. If the log then shows `Connecting to 185.27.134.11:21`, the listing should work. If it still shows a `64:ff9b::` address, your network is translating the connection regardless. 2. Connect through a VPN. That gives you an ordinary IPv4 route to the server.
forum.infinityfree.com
October 29, 2026 at 7:37 PM
🚨 EUVD-2026-111552
📊 6.0/10
🏢 Tencent

📝 WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111552

#cybersecurity #infosec #cve #euvd
October 28, 2026 at 3:02 AM
Windows 11 25H2でCLAT正式提供、26200.9550からIPv4アプリのIPv6専用網接続に対応
Windows 11 25H2でCLAT正式提供、26200.9550からIPv4アプリのIPv6専用網接続に対応
Windows 11 25H2のCLATがビルド26200.9550以降で正式提供された。IPv4専用アプリの通信をIPv6へ変換し、NAT64経由でIPv4サービスに接続する。既存アプリを残したIPv6専用網への移行を支援する。
joho-todai.com
October 28, 2026 at 9:46 AM
• Global Unicast Filtering: resolved IPs are checked against an explicit blocklist (Loopback, RFC 1918, CGNAT, Link-Local, Unique Local, NAT64, cloud IMDS endpoints like 169.254.169.254). Non-public IPs are rejected instantly. (4/7)
October 25, 2026 at 12:58 PM
Roundcube Webmail HIGH severity SSRF (CVE-2026-114730) enables filter bypass via NAT64 prefixes in 1.6.14 – 1.6.19 & 1.7.0 – 1.7.4. Update to latest version promptly. https://radar.offseq.com/threat/cve-2026-114730-cwe-918-server-side-request-forgery-ssrf-in-roundcube-webmail-151b1341ca143178 #Of...
CVE-2026-114730: CWE-918 Server-Side Request Forgery (SSRF) in Roundcube Webmail
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215
radar.offseq.com
October 22, 2026 at 3:00 AM
Check out the GA of Private NAT64
Learn more here >> https://docs.cloud.google.com/nat/docs/private-nat#nat64

#googlecloud #networking
Google Cloud Documentation
google.smh.re
October 19, 2026 at 11:57 PM
Cloud NAT update on October 2, 2026 https://docs.cloud.google.com/nat/docs/release-notes#October_02_2026 #googlecloud General Availability: Cloud NAT gateways for Private NAT support IPv6 to IPv4 network address translation. For more information, see NAT64 in Private NAT.
October 2, 2026 at 6:40 PM
🚨 EUVD-2026-86342
📊 6.3/10
🏢 liketrek

📝 TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IP...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86342

#cybersecurity #infosec #cve #euvd
September 24, 2026 at 7:02 PM
If you have a somewhat modern phone you don’t need IPv4 address to reach IPv4-only sites. It’s going to be either NAT64 or 464XLAT.

It’s a pretty common configuration nowadays.
September 22, 2026 at 3:33 PM
How I Tricked OpenClaw Into Attacking Its Own Network: A NAT64 SSRF Bypass Anurag Mewar 8 min read · 2 hours ago 2 hours ago -- Listen Share A story about how a single misread pair of bytes let a…
How I Tricked OpenClaw Into Attacking Its Own Network: A NAT64 SSRF Bypass
How I Tricked OpenClaw Into Attacking Its Own Network: A NAT64 SSRF Bypass Anurag Mewar 8 min read · 2 hours ago 2 hours ago -- Listen Share A story about how a single misread pair of bytes let a…
clawbeat.co
September 12, 2026 at 5:40 PM
oh i put /96 for the nat64 prefix route. instead of /120. oops
September 8, 2026 at 10:36 PM
don't add a static route to a NAT64 subnet on opnsense apparently, EVERY wireguard interface on my router just went down as i did that lmao
September 8, 2026 at 9:17 PM
Ha ha!

Nat64, DNS64, Jool. Full IPV6. Github only responds to IPV4 ha ha. Achivement unlocked!

-Yukiko.

#ipv6
September 2, 2026 at 2:21 PM
Right, Rayne already dealt with the Ipv6 firewall side of our scripts, our self sufficient firewall, perhaps I may change my plans for the next days off to work on Nat64 and dns64. I am not in a hurry ha ha. Today should be rest, some streaming and continuing our work week, perhaps lore?

-Yukiko.
We've had very productive days tinkering as of recent, tomorrow Sunday well get back to more Ipv6 endeavours, we haven't given up on Nat64 and Dns64 ha ha.

-Yukiko.
August 30, 2026 at 7:21 AM
🛡️ Transparent MITM interception with per-host TLS certificates from a custom CA, plus SSRF protection for private networks (RFC 1918, loopback, link-local, CGNAT, IPv6 ULA/NAT64/6to4) with DNS-rebinding prevention
August 29, 2026 at 3:00 PM
We've had very productive days tinkering as of recent, tomorrow Sunday well get back to more Ipv6 endeavours, we haven't given up on Nat64 and Dns64 ha ha.

-Yukiko.
August 29, 2026 at 6:13 AM
CLAT přijat do NetworkManageru, pomůže v sítích bez IPv4 adres
CLAT přijat do NetworkManageru, pomůže v sítích bez IPv4 adres
Přibližně rok čekal nový kód implementující CLAT na zařazení do projektu NetworkManager. Po vyřešení všech technických detailů byl nyní kód zařazen a stal se tak součástí vývojových verzí. Přidává CLAT a automatickou detekci prefixu pro NAT64 pomocí volby PREF64 obsažené v RA. Kvůli výkonu je podpora implementována v jádře v podobě eBPF. Pokud si kód sestavíte sami, budete mít podporu CLAT vypnutou (volba ipv4.clat je nastavena na no) a musíte si ji explicitně zapnout (hodnota auto). Součástí je i podpora sítí typu IPv6-mostly, které oznamují připravenost na běh v režimu IPv6 a nabízejí IPv4 adresu pouze jako doplněk pomocí volby DHCP číslo 108. Podle správců NetworkManageru je podpora CLAT vcelku funkční, přestože je ještě potřeba vylepšit některé její aspekty. Například jde o lepší navázání na CLI nebo podporu DAD pro IPv6 adresy v CLAT. Vývojáři varují, že do vydání se také mohou změnit použité konfigurační volby. CLAT (Customer-side Translator) je komponenta používaná v rámci mechanismu 464XLAT, který umožňuje komunikaci mezi starými IPv4-only aplikacemi a IPv6-only sítěmi. CLAT běží na koncovém zařízení a provádí překlad paketů z lokální IPv4 na IPv6 pomocí bezestavového překladu. V sítí pak běží PLAT nebo NAT64, který převádí pakety mezi IPv6 a skutečným IPv4 cílem. V sítích s IPv6 se CLAT uplatní tam, kde koncová aplikace nebo služba podporuje pouze IPv4. CLAT vytvoří lokální IPv4 rozhraní a přeloží provoz do formátu IPv6. Tím umožní úplnou konektivitu bez nutnosti, aby poskytovatel sítě podporoval dual-stack nebo aby aplikace byly upraveny pro IPv6.
www.root.cz
January 26, 2026 at 10:00 AM
tu aurais pû faire du nat64 (www.rfc-editor.org/rfc/rfc6052) pour accéder à des ressources IPv4 only depuis de l'ipv6 à la place de ta registry maison je pense
RFC 6052: IPv6 Addressing of IPv4/IPv6 Translators
www.rfc-editor.org
December 23, 2025 at 9:03 PM
We're proud to announce our DNS64 service! For anyone running behind a NAT64 gateway, you can use our DNS64 resolver, supporting DNS and DNS over TLS. saddle.network/srv/dns64/

We plan on accompanying this service with a public NAT64 gateway, so keep your ears open if an IPv6 future interests you!
Recursive DNS64
Fast and reliable DNS64 resolution.
saddle.network
January 18, 2026 at 11:23 PM
What if instead of ipv4 NAT by default routers did ULA + NAT64/DNS64 by default (and public v6 when available). how much breakage would there be?
January 11, 2026 at 12:33 AM
🟠 Pydantic AI v2 beta 3 ships an SSRF hardening fix for NAT64 and ISATAP edge cases

Pydantic AI v2.0.0b3 is not a feature release, but it quietly pulls in a security fix for an SSRF cloud-metadata blocklist bypass ti...

https://github.com/pydantic/pydantic-ai/releases/tag/v2.0.0b3

#AI #AgentWyre
Release v2.0.0b3 (2026-05-22) · pydantic/pydantic-ai · GitHub
AI Agent Framework, the Pydantic way. Contribute to pydantic/pydantic-ai development by creating an account on GitHub.
github.com
May 23, 2026 at 2:07 AM
久しぶりに NAT64 (jool) + DNS64 (unbound) を導入した
WSL が実質 IPv6 Single Stack になった​:ablobcat_kusudama:​
IPv4 嫌い
久しぶりに NAT64 を導入して WSL を IPv6 Single Stack にしようかな
June 22, 2026 at 4:10 PM
IPv4 嫌い
久しぶりに NAT64 を導入して WSL を IPv6 Single Stack にしようかな
June 22, 2026 at 3:07 PM