hello all,
we have trouble from one datacenter in CH to reach a special DNS server of one of our business partners in Argentina. And only from this datacenter / IP-subnet. but it doesn't look like a local problem.
from all other locations in Belarus/Brasil/Hungary/France/Germany and also via ADSL-links of Sunrise in CH or via Cable Internet by Cablecom in CH we can connect without any trouble.
so the problem can be: - local - on way - remote side
see failure exemplary from one host in this datacenter:
[root@ns1 root]# nslookup
server ns1.allytech.com
Default server: ns1.allytech.com Address: 200.49.145.101#53
mail.rebel-management.com
Server: ns1.allytech.com Address: 200.49.145.101#53
** server can't find mail.rebel-management.com: SERVFAIL
server 200.49.145.101
Default server: 200.49.145.101 Address: 200.49.145.101#53
mail.rebel-management.com
;; connection timed out; no servers could be reached
from all other locations in Belarus/Brasil/Hungary/France/Germany and also via ADSL-links of Sunrise in CH we can connect without any trouble:
root@PP208upFW01:/home/admin# nslookup
server 200.49.145.101
Default server: 200.49.145.101 Address: 200.49.145.101#53
mail.rebel-management.com
Server: 200.49.145.101 Address: 200.49.145.101#53
Name: mail.rebel-management.com Address: 200.49.145.27
we contacted already our provider of our datacenter, but we think the problem is at the end DNS, or on the way, because also every trace from any location shows trouble near to this DNS:
12 cablevision-s-a.tengigabitethernet3-4.ar3.eze1.gblx.net (207.136.166.242) 334.160 ms 331.279 ms 332.844 ms 13 * * * 14 * * * 15 smtp1.dnscheck.com.ar (200.49.145.101) 339.278 ms 341.718 ms 364.889 ms
and we fond only problems with this single DNS there. (sure, can be also local by our provider - we will see - but can not believe it)
Please do me a favor: try from your datacenter to resolve via this DNS
Default server: ns1.allytech.com Address: 200.49.145.101#53
to resolve
mail.rebel-management.com
and report also problems by connecting this DNS with infos of your provider to: swinog-ch@hightowernet.de
many thanks in advance
stephan
Stephan Wolf wrote:
Please do me a favor: try from your datacenter to resolve via this DNS
Default server: ns1.allytech.com Address: 200.49.145.101#53
to resolve
mail.rebel-management.com
Local lookup:
dig mail.rebel-management.com
worked fine.
dig @ns1.allytech.com. mail.rebel-management.com
also worked fine.
dig @ns2.allytech.com. mail.rebel-management.com
also worked fine.
/Per Jessen, Herrliberg ZH
hi stephan
[steven@dagobert ~]$ dig mail.rebel-management.com
--> all fine from my side
[steven@dagobert ~]$ dig mail.rebel-management.com @ns1.allytech.com
--> all fine from my side
[steven@dagobert ~]$ dig mail.rebel-management.com @ns2.allytech.com
--> all fine from my side
my traceroute looks similar to yours: 9 ge1-0.ar2.lon2.gblx.net (195.66.224.112) 21.316 ms 21.511 ms 21.298 ms 10 CABLEVISION-S-A.TenGigabitEthernet3-4.ar3.EZE1.gblx.net (207.136.166.242) 238.915 ms 238.818 ms 238.624 ms 11 * * * 12 * * * 13 smtp27.allytech.com (200.49.145.27) 250.816 ms 253.820 ms 251.001 ms
host is reachable:
[steven@dagobert ~]$ ping 200.49.145.27 PING 200.49.145.27 (200.49.145.27): 56 data bytes 64 bytes from 200.49.145.27: icmp_seq=0 ttl=50 time=242.537 ms 64 bytes from 200.49.145.27: icmp_seq=1 ttl=50 time=251.503 ms 64 bytes from 200.49.145.27: icmp_seq=2 ttl=50 time=240.112 ms ^C --- 200.49.145.27 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 240.112/244.717/251.503/4.899 ms
greetings & gn8
-steven
-----Original Message----- From: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Stephan Wolf Sent: Wednesday, November 12, 2008 8:28 PM To: swinog@swinog.ch Subject: [swinog] trouble to reach a DNS-server from a single network inswitzerland
hello all,
we have trouble from one datacenter in CH to reach a special DNS server of one of our business partners in Argentina. And only from this datacenter / IP-subnet. but it doesn't look like a local problem.
from all other locations in Belarus/Brasil/Hungary/France/Germany and also via ADSL-links of Sunrise in CH or via Cable Internet by Cablecom in CH we can connect without any trouble.
so the problem can be:
- local
- on way
- remote side
see failure exemplary from one host in this datacenter:
[root@ns1 root]# nslookup
server ns1.allytech.com
Default server: ns1.allytech.com Address: 200.49.145.101#53
mail.rebel-management.com
Server: ns1.allytech.com Address: 200.49.145.101#53
** server can't find mail.rebel-management.com: SERVFAIL
server 200.49.145.101
Default server: 200.49.145.101 Address: 200.49.145.101#53
mail.rebel-management.com
;; connection timed out; no servers could be reached
from all other locations in Belarus/Brasil/Hungary/France/Germany and also via ADSL-links of Sunrise in CH we can connect without any trouble:
root@PP208upFW01:/home/admin# nslookup
server 200.49.145.101
Default server: 200.49.145.101 Address: 200.49.145.101#53
mail.rebel-management.com
Server: 200.49.145.101 Address: 200.49.145.101#53
Name: mail.rebel-management.com Address: 200.49.145.27
we contacted already our provider of our datacenter, but we think the problem is at the end DNS, or on the way, because also every trace from any location shows trouble near to this DNS:
12 cablevision-s-a.tengigabitethernet3-4.ar3.eze1.gblx.net (207.136.166.242) 334.160 ms 331.279 ms 332.844 ms 13 * * * 14 * * * 15 smtp1.dnscheck.com.ar (200.49.145.101) 339.278 ms 341.718 ms 364.889 ms
and we fond only problems with this single DNS there. (sure, can be also local by our provider - we will see - but can not believe it)
Please do me a favor: try from your datacenter to resolve via this DNS
Default server: ns1.allytech.com Address: 200.49.145.101#53
to resolve
mail.rebel-management.com
and report also problems by connecting this DNS with infos of your provider to: swinog-ch@hightowernet.de
many thanks in advance
stephan
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Am 12.11.2008 um 20:28 schrieb Stephan Wolf:
rebel-management.com
Yeah, works fine from here to. And from my colo-box in Nuremberg.
Try one of the various public nslookup tools on the web, if you don't trust your local resolver. Or setup a quick dnscache installation and go directly via the root- servers.
Rainer
hi,
we make direct resolution via root servers but we found out that only this host is affected - so we tried directly to connect.
but actual state:
we found out, that not only Nine @ ColoZH is affected, also Init7 from ColoZH and also Init7 in Los Angeles. I received a private message with this information.
Reachability: We can also reach this host / ping. But only DNS resloving is NOT possible via ns1.allytech.com and only from ColoZH ;-/
first I thought on the stopped peerings / prefixes with SwissIX, but we can access, IP traffic is routed but only DNS not ?!! So I can not imagine that it is a local problem at ColoZH and its providers there.
hmm, keep u posted
If someone knows more, info is welcome
regards
stephan
Guten Tag Rainer Duffner,
am Donnerstag, 13. November 2008 um 01:05 schrieben Sie:
Am 12.11.2008 um 20:28 schrieb Stephan Wolf:
rebel-management.com
Yeah, works fine from here to. And from my colo-box in Nuremberg.
Try one of the various public nslookup tools on the web, if you don't trust your local resolver. Or setup a quick dnscache installation and go directly via the root- servers.
Rainer _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Hi Stephan,
I tried it from ColoZH (Init7) and it works fine!
mail.rebel-management.com ns1.allytech.com
Server: ns1.allytech.com Address: 200.49.145.101
Name: mail.rebel-management.com Address: 200.49.145.27
Regards Simon
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Stephan Wolf Gesendet: Donnerstag, 13. November 2008 09:26 An: swinog@swinog.ch Betreff: Re: [swinog] []: Re: trouble to reach a DNS-server from a singlenetwork in switzerland
hi,
we make direct resolution via root servers but we found out that only this host is affected - so we tried directly to connect.
but actual state:
we found out, that not only Nine @ ColoZH is affected, also Init7 from ColoZH and also Init7 in Los Angeles. I received a private message with this information.
Reachability: We can also reach this host / ping. But only DNS resloving is NOT possible via ns1.allytech.com and only from ColoZH ;-/
first I thought on the stopped peerings / prefixes with SwissIX, but we can access, IP traffic is routed but only DNS not ?!! So I can not imagine that it is a local problem at ColoZH and its providers there.
hmm, keep u posted
If someone knows more, info is welcome
regards
stephan
WEIRD!
tested right now ;)
vzhost-celeron-zurich:~# dig @200.49.145.101 mail.rebel-management.com
; <<>> DiG 9.3.4-P1.1 <<>> @200.49.145.101 mail.rebel-management.com ; (1 server found) ;; global options: printcmd ;; connection timed out; no servers could be reached
ColoZH, Init7. Works NOT
Simon, which IP Range are you? I'm on the 77.109.... I suppose you have 82.197......?
from my home VDSL it works, there I have the 82 Range
lg Silvan Am 13.11.2008 um 10:24 schrieb Simon Gilli:
Hi Stephan,
I tried it from ColoZH (Init7) and it works fine!
mail.rebel-management.com ns1.allytech.com
Server: ns1.allytech.com Address: 200.49.145.101
Name: mail.rebel-management.com Address: 200.49.145.27
Regards Simon
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Stephan Wolf Gesendet: Donnerstag, 13. November 2008 09:26 An: swinog@swinog.ch Betreff: Re: [swinog] []: Re: trouble to reach a DNS-server from a singlenetwork in switzerland
hi,
we make direct resolution via root servers but we found out that only this host is affected - so we tried directly to connect.
but actual state:
we found out, that not only Nine @ ColoZH is affected, also Init7 from ColoZH and also Init7 in Los Angeles. I received a private message with this information.
Reachability: We can also reach this host / ping. But only DNS resloving is NOT possible via ns1.allytech.com and only from ColoZH ;-/
first I thought on the stopped peerings / prefixes with SwissIX, but we can access, IP traffic is routed but only DNS not ?!! So I can not imagine that it is a local problem at ColoZH and its providers there.
hmm, keep u posted
If someone knows more, info is welcome
regards
stephan
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
-
Per Jessen -
Rainer Duffner -
Silvan Gebhardt -
Simon Gilli -
Stephan Wolf -
Steven Glogger