Re: Fwd: New ADSL line, new firewall..
Quoting "Andrew McGlashan"
On 26/11/2013 11:10 AM, Petros wrote:
Weird that only some worksites don't work.. it's a bit how a friend living over in China describes it - randomly some stuff is blocked. I hope we are not there yet..
Yes, well, I had an issue with getting to the Billion website in AU ... the ISP claimed no block, Billion claimed no block -- I got a temporary extra block of IPs to test and another IP was fine from the same ISP, but they never did find out what was blocking my normal IP, not the ISP, nor Billion. In the end I just routed the connection via another service, but most people don't have multiple services to /choose/ from.
True. At the moment I have two links but one should be decommissioned soon. Interesting the difference between traceroute when using ICMP and TCP port 80: $ traceroute -I www.zeit.de traceroute to www.zeit.de (217.13.68.220), 64 hops max, 72 byte packets 1 115.186.196.105 (115.186.196.105) 20.636 ms 20.494 ms 20.224 ms 2 3812.Gi0.br1.cit190.uecomm.net.au (218.185.31.142) 19.917 ms 20.789 ms 20.960 ms 3 VLAN323.o3mlc76f05.optus.net.au (61.88.143.197) 20.641 ms 22.014 ms 21.419 ms 4 203.208.192.241 (203.208.192.241) 195.414 ms 194.884 ms 195.379 ms 5 203.208.172.242 (203.208.172.242) 194.133 ms 203.208.172.238 (203.208.172.238) 194.407 ms 203.208.172.246 (203.208.172.246) 194.606 ms 6 80.150.171.41 (80.150.171.41) 196.557 ms 197.589 ms 196.317 ms 7 bs-ea1-i.BS.DE.NET.DTAG.DE (62.154.99.34) 357.788 ms 358.499 ms 364.120 ms 8 dtag.gaertner.de (80.150.168.230) 353.579 ms 354.360 ms 354.330 ms 9 www.zeit.de (217.13.68.220) 355.478 ms 355.685 ms 358.413 ms BTW: I can ping www.zeit.de on both without packet loss.. Here for the new link if I do a traceroute using TCP port 80: $ traceroute -P tcp -p 80 www.zeit.de traceroute to www.zeit.de (217.13.68.220), 64 hops max, 64 byte packets 1 115.186.196.105 (115.186.196.105) 21.767 ms 20.853 ms 20.700 ms 2 3812.Gi0.br1.cit190.uecomm.net.au (218.185.31.142) 20.425 ms 21.105 ms 21.113 ms 3 VLAN323.o3mlc76f05.optus.net.au (61.88.143.197) 21.699 ms 20.173 ms 22.365 ms 4 203.208.192.241 (203.208.192.241) 196.148 ms 195.114 ms 195.871 ms 5 203.208.172.242 (203.208.172.242) 194.133 ms so-1-0-3-0.toknf-cr2.ix.singtel.com (203.208.173.22) 200.944 ms 203.208.172.246 (203.208.172.246) 193.771 ms 6 80.150.171.41 (80.150.171.41) 198.757 ms 195.419 ms 196.833 ms 7 bs-ea1-i.BS.DE.NET.DTAG.DE (62.154.99.34) 357.401 ms 359.721 ms 356.776 ms 8 dtag.gaertner.de (80.150.168.230) 354.517 ms 353.234 ms 355.168 ms 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * 14 * * * .. 54 * * * .. I don't understand it.. Why do the port 80 packets loop forever? I never worked for an ISP so maybe people with this background have seen this before? I also see that the old link is using US addresses, the new one Singapore.. Regards Peter
On Tue, 26 Nov 2013 03:15:33 PM Petros wrote:
I don't understand it.. Why do the port 80 packets loop forever?
I think that's a problem with traceroute, I see the same behaviour from it but can successfully connect to that port on that host. If I use the tcptraceroute program (not the wrapper from the traceroute one) I see a slightly different path at hops 7, 8 and 9 and also the open port. tcptraceroute www.zeit.de Selected device eth4, address 192.168.1.104, port 45998 for outgoing packets Tracing the path to www.zeit.de (217.13.68.220) on TCP port 80 (http), 30 hops max 1 192.168.1.254 0.420 ms 0.368 ms 0.388 ms 2 lns20.mel6.on.ii.net (150.101.212.45) 24.187 ms 23.084 ms 22.393 ms 3 xe10-3-0.cr1.mel4.on.ii.net (150.101.33.174) 45.573 ms 24.159 ms 23.669 ms 4 ae2.br1.syd7.on.ii.net (150.101.33.28) 35.703 ms 35.085 ms 35.181 ms 5 te0-2-1-2.br1.sjc2.on.ii.net (150.101.33.147) 212.898 ms 212.828 ms 213.087 ms 6 144.232.191.193 190.423 ms 191.943 ms 191.125 ms 7 144.232.7.145 192.209 ms 192.083 ms 193.375 ms 8 144.232.1.156 194.895 ms 196.255 ms 219.709 ms 9 62.156.138.213 192.136 ms 193.651 ms 191.893 ms 10 bs-ea1-i.BS.DE.NET.DTAG.DE (62.154.99.34) 381.373 ms 352.420 ms 351.816 ms 11 dtag.gaertner.de (80.150.168.230) 378.925 ms 378.714 ms 378.922 ms 12 www.zeit.de (217.13.68.220) [open] 379.190 ms 378.819 ms 380.329 ms So I'd suggest trying tcptraceroute instead. cheers, Chris -- Chris Samuel : http://www.csamuel.org/ : Melbourne, VIC This email may come with a PGP signature as a file. Do not panic. For more info see: http://en.wikipedia.org/wiki/OpenPGP
participants (2)
-
Chris Samuel -
Petros