IP network not reachable from switzerland - 69.162.65.122, but from outside, eg belarus/brasil
hello all,
we can NOT reach the upper IP from:
- swisscom mobile - cablecom.biz - cablecom home - swissix
but: from our brasilian firewall I can ping host and reach smtp / http sockets - also from a belarus provider.
and also from a testsite, hosted in germany / hetzner, the IP is reachable.
but effectively from not any switzerland ISP reachable :-(
sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not possible in any case
so host 69.162.65.122 is only answering to ICMP echo requests, and listens to tcp25 and tcp80
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
thanks in advance
stephan
http://whois.arin.net/rest/net/NET-69-162-65-120-1
Network NetRange 69.162.65.120 - 69.162.65.127 CIDR 69.162.65.120/29 Name VOICONET-1 Handle NET-69-162-65-120-1 Parent LSN-DLLSTX-2 (NET-69-162-64-0-1) Net Type Reassigned Origin AS AS46475 Customer Voico.Net (C02455997)
Am 07.04.2011 17:40, schrieb Stephan Wolf:
we can NOT reach the upper IP from:
- swisscom mobile
- cablecom.biz
- cablecom home
- swissix
but: from our brasilian firewall I can ping host and reach smtp / http sockets
- also from a belarus provider.
and also from a testsite, hosted in germany / hetzner, the IP is reachable.
but effectively from not any switzerland ISP reachable :-(
not particularly true...
sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not possible in any case
so host 69.162.65.122 is only answering to ICMP echo requests, and listens to tcp25 and tcp80
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
We have the prefix in our table and are advertising it to Hetzner, I suppose. Check our LG in case: http://www.init7.net/looking-glass/index.php
BGP routing table entry for 69.162.64.0/18 Paths: (1 available, best #1, table Default-IP-Routing-Table) Not advertised to any peer 6461 46475 213.144.128.179 from 213.144.129.65 (213.144.128.179) Origin IGP, metric 1, localpref 150, valid, internal, best Community: 13030:1 13030:1017 13030:51202 Originator: 213.144.128.179, Cluster list: 213.144.128.177 Last update: Thu Apr 7 06:30:31 2011
Best regards,
Fredy Künzler Init7 / AS13030
so host 69.162.65.122 is only answering to ICMP echo requests, and listens to tcp25 and tcp80
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
Does _not_ work when exiting via the preferred path (I see two primary routes, one via 6461_46475 and one via 12179_46475, whereas the latter has many 12179 prepended and is not normally used).
I _could_ get there when exiting via our cogent link (and thus using the 12179 path) _and_ using the cogent link IP address. When I use the same path, but one of our own IP addresses, I can't get there.
So, perhaps the problem is not with the reachability of your network from Switzerland, but the reachability of Swiss networks from that IP address?
Cheers, Markus
i cannt ping this ip tried from ip-max and cablecom.
Best reagrds,
p.schlumpf
On Thu, 2011-04-07 at 17:40 +0200, Stephan Wolf wrote:
hello all,
we can NOT reach the upper IP from:
- swisscom mobile
- cablecom.biz
- cablecom home
- swissix
but: from our brasilian firewall I can ping host and reach smtp / http sockets - also from a belarus provider.
and also from a testsite, hosted in germany / hetzner, the IP is reachable.
but effectively from not any switzerland ISP reachable :-(
sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not possible in any case
so host 69.162.65.122 is only answering to ICMP echo requests, and listens to tcp25 and tcp80
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
thanks in advance
stephan
http://whois.arin.net/rest/net/NET-69-162-65-120-1
Network NetRange 69.162.65.120 - 69.162.65.127 CIDR 69.162.65.120/29 Name VOICONET-1 Handle NET-69-162-65-120-1 Parent LSN-DLLSTX-2 (NET-69-162-64-0-1) Net Type Reassigned Origin AS AS46475 Customer Voico.Net (C02455997)
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
For what it's worth: Stephan,
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
$ telnet 69.162.65.122 25 Trying 69.162.65.122... Connected to 69.162.65.122. Escape character is '^]'. 220-vitoria.dedicado.in ESMTP Exim 4.69 #1 Fri, 08 Apr 2011 06:16:41 -0300 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
This is from 74.125.57.33 in AS15169 (reaching you via abovenet) and 193.109.122.62 in AS12859 (reaching you via ntt/pnap: 2914 12179 46475 I)
HTH,
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hello,
... should reply to the right address ...
Am Do den 7. Apr 2011 um 16:40 schrieb Stephan Wolf:
sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not possible in any case
so host 69.162.65.122 is only answering to ICMP echo requests, and listens to tcp25 and tcp80
could you be so kind and check, if you can connect to this host, and tell me, via which ISP / peering ?
Using mtr to trace to the host gives two results: 1. From University Zürich: 1. uzhfwidsys1-vlan310.uzh.ch 2. uzhrtdily11-vlan885.uzh.ch 3. uzhrtcil1-ten1-3.uzh.ch 4. uzhrtvx1-vlan4032.uzh.ch 5. uzhrtfu1-vlan4032.uzh.ch 6. uzhix1-vlan4006.uzh.ch 7. swizh2-ten1-4.uzh.ch 8. swiIX1-10GE-1-3.switch.ch 9. zch-b1-geth3-1.telia.net 10. prs-bb1-link.telia.net 11. nyk-bb1-link.telia.net 12. dls-bb1-link.telia.net 13. limestone-ic-135964-dls-bb1.c.telia.net 14. te5-1.bdr1.core1.dllstx3.dallas-idc.com 15. 242-250-115-208.reverse.lstn.net 16. ???
... or from my $HOME: 1. nag.ket 2. dynamic-198-161.catv.glattnet.ch 3. ro.w116.01-feth3-0.glattnet.ch 4. lcduecpe1.glattnet.ch 5. 83.144.194.177 6. r1bas1.core.init7.net 7. r1fra2.core.init7.net 8. xe-1-2-0.mpr1.fra4.de.above.net 9. xe-1-1-0.mpr1.cdg12.fr.above.net 10. xe-4-0-0.mpr1.lhr3.uk.above.net 11. xe-4-3-0.cr2.dca2.us.above.net 12. xe-2-2-0.cr2.iah1.us.above.net 13. xe-1-2-0.cr2.dfw2.us.above.net 14. xe-0-2-0.mpr1.dfw1.us.above.net 15. 64.125.188.182 16. te6-1.bdr2.core1.dllstx3.dallas-idc.com 17. 242-250-115-208.reverse.lstn.net 18. ???
- From my Server in Germany (Hetzner): 1. static.129.23.4.46.clients.your-server.de 2. hos-tr2.juniper1.rz10.hetzner.de 3. hos-bb1.juniper4.ffm.hetzner.de 4. decix2-hetzner.aixit.net 5. xe-1-2-0.mpr1.fra4.de.above.net 6. xe-1-1-0.mpr1.cdg12.fr.above.net 7. xe-4-0-0.mpr1.lhr3.uk.above.net 8. xe-4-3-0.cr2.dca2.us.above.net 9. xe-2-2-0.cr2.iah1.us.above.net 10. xe-1-2-0.cr2.dfw2.us.above.net 11. xe-0-2-0.mpr1.dfw1.us.above.net 12. 64.125.188.182 13. te6-1.bdr2.core2.dllstx3.dallas-idc.com 14. 246-250-115-208.reverse.lstn.net 15. vitoria.dedicado.in
So until 246-250-115-208.reverse.lstn.net everything is ok and the trouble begins after that router.
Gruß Klaus - -- Klaus Ethgen http://www.ethgen.ch/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen Klaus@Ethgen.de Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B
-
Fredy Kuenzler -
Klaus Ethgen -
Markus Wild -
philippe Schlumpf -
Pim van Pelt -
Stephan Wolf