[Discuss] Problem accessing blu.org

Fri May 22 10:52:06 EDT 2020

Aha! – Exactly why I have my own Asus router, even though I work here.

The xfinity router kept losing my port forwards and nobody could explain why.

The Asus works perfectly.

From: Discuss <discuss-bounces+joe=polcari.com at lists.blu.org> on behalf of Jerry Feldman <gaf.linux at gmail.com>
Date: Friday, May 22, 2020 at 7:48 AM
Cc: "discuss at blu.org" <discuss at blu.org>
Subject: Re: [Discuss] Problem accessing blu.org

I think I solved the problem. Xfinity moved port forwarding out of the

gateway and onto the web site. The issue seems to be their "Advanced

Security". Turned it off and I was able to access blu.org. Unfortunately

there is no detail stuff. It is just on or off. With "Advanced Security"

turned on, port forwarding is also turned off :-(

On Wed, May 20, 2020 at 3:21 PM Derek Atkins <derek at ihtfp.com> wrote:

Interesting, "communication administratively prohibited".

Does BLU run Fail2ban?  Maybe your Comcast IP Address got banned/blocked?

Although that wouldn't explain why traceroutes would stop so quickly.

If you run traceroute again can you still get that far or does it stop at

the first hop?

Note, from

https://serverfault.com/questions/434211/what-does-z-and-x-mean-in-a-traceroute

Since Linux uses UDP for trace-routes, this can originate from a

--reject-with icmp-host-prohibited rule at the destination. Some Linux

distros have this as a default configuration. To fix this you need to

reply with --reject-with icmp-port-unreachable on UDP ports 33434 through

33534.

-derek

On Wed, May 20, 2020 3:08 pm, Jerry Feldman wrote:

> This is my current traceroute about 5 mins after resetting my cable modem

> Note the !X. Note that vranix is a cname for driftwood.blu.org

> [gaf at gaf ~]$ traceroute blu.org

> traceroute to blu.org (216.235.254.230), 30 hops max, 60 byte packets

>  1  * * *

>  2  96.120.64.29 (96.120.64.29)  20.949 ms  22.637 ms  22.027 ms

>  3  162.151.169.205 (162.151.169.205)  21.398 ms  22.473 ms  22.657 ms

>  4  be-310-ar01.woburn.ma.boston.comcast.net (96.108.44.221)  22.884 ms

>  34.046 ms  35.013 ms

>  5  96.108.71.30 (96.108.71.30)  35.387 ms  36.020 ms  35.471 ms

>  6  50.231.30.210 (50.231.30.210)  36.075 ms  17.799 ms  18.689 ms

>  7  vranix.blu.org (216.235.254.230)  17.894 ms !X  16.698 ms !X  30.475

> ms

> !X

> 

> On Wed, May 20, 2020 at 3:01 PM Jerry Feldman <gaf.linux at gmail.com>

wrote:

> 

>> Thanks Derek.

>> I've spent hours chatting and speaking with Comcast. They elevated me to

>> 'advanced repair'. The first advanced guy I chatted with seemed to be

>> pretty sharp, but resetting the modem broke off the chat. The second guy

>> I

>> spoke to over the phone elevated me to  'advanced repair' and this guy

>> wasn't too sharp. First he always went to the browser, and I told him it

>> was on the terminal. He finally said it wasn't comcast. One thing I

>> wanted

>> to do was to have comcast reset dhcp so I could get a different IP

>> address.

>> 

>> I reset the cable modem/gateway a few minutes ago and I am able to

>> access

>> blu.org. I did this so I could display the meeting page. As long as I

>> don't refresh that tab, I can display it on jitsi so if I lose

>> connectivity

>> with blu, I can still display the web site.

>> 

>> On Wed, May 20, 2020 at 8:41 AM Derek Atkins <derek at ihtfp.com> wrote:

>> 

>>> Here is another question for you:  what is your local network

>>> configuration?  Are you using Comcast's modem/router directly or do you

>>> have your own router behind their modem?  If the latter, what happens

>>> if

>>> you try to "remove" your own router?  Does that change anything?

>>> 

>>> Another avenue to look at is whether you might be filling up the

>>> modem's

>>> NAT table?  A very unlikely scenario, but it's certainly one I've hit

>>> (on

>>> AT&T).

>>> 

>>> IF you can display the problem with only comcast equipment I'd phone

>>> into

>>> their tech support.

>>> 

>>> -derek

>>> 

>>> On Wed, May 20, 2020 8:11 am, Jerry Feldman wrote:

>>> > I've rebooted the router a few times. After I reboot the router, I am

>>> able

>>> > to access the site for about 5 minutes. I am certain the blocking is

>>> > relatively local.

>>> >

>>> > On Tue, May 19, 2020 at 2:41 PM Joe Polcari <Joe at polcari.com> wrote:

>>> >

>>> >> FYI – I am inside Comcast’s network – so not blocked in any manner,

>>> in

>>> >> fact nothing is blocked in any manner in the ISP part of the

>>> network.

>>> >>

>>> >> – let me see how much of this I can paste here

>>> >>

>>> >>

>>> >>

>>> >> $ traceroute blu.org

>>> >>

>>> >> traceroute to blu.org (216.235.254.230), 64 hops max, 52 byte

>>> packets

>>> >>

>>> >>  1  * * *

>>> >>

>>> >>  2  192.168.1.1 (192.168.1.1)  3.825 ms  3.507 ms  4.291 ms

>>> >>

>>> >>

>>> >>

>>> >> Suffice it to say that from Florida it routes through Georgia, to

>>> >> Chicago,

>>> >> to Woburn to blu.org.

>>> >>

>>> >>

>>> >>

>>> >> 22  50.231.30.210 (50.231.30.210)  72.456 ms  71.796 ms  70.346 ms

>>> >>

>>> >> 23  vranix.blu.org (216.235.254.230)  71.067 ms !Z  79.478 ms !Z

>>> 71.794

>>> >> ms !Z

>>> >>

>>> >>

>>> >>

>>> >> $ ping blu.org

>>> >>

>>> >> PING blu.org (216.235.254.230): 56 data bytes

>>> >>

>>> >> 64 bytes from 216.235.254.230: icmp_seq=0 ttl=45 time=70.776 ms

>>> >>

>>> >> 64 bytes from 216.235.254.230: icmp_seq=1 ttl=45 time=69.724 ms

>>> >>

>>> >> 64 bytes from 216.235.254.230: icmp_seq=2 ttl=45 time=70.567 ms

>>> >>

>>> >> 64 bytes from 216.235.254.230: icmp_seq=3 ttl=45 time=70.714 ms

>>> >>

>>> >> ^C

>>> >>

>>> >> --- blu.org ping statistics ---

>>> >>

>>> >> 4 packets transmitted, 4 packets received, 0.0% packet loss

>>> >>

>>> >> round-trip min/avg/max/stddev = 69.724/70.445/70.776/0.423 ms

>>> >>

>>> >>

>>> >>

>>> >>

>>> >>

>>> >> From: Discuss <discuss-bounces+joe=polcari.com at lists.blu.org> on

>>> behalf

>>> >> of Bill Ricker <bill.n1vux at gmail.com>

>>> >> Date: Tuesday, May 19, 2020 at 11:22 AM

>>> >> To: Derek Atkins <derek at ihtfp.com>

>>> >> Cc: "discuss at blu.org" <discuss at blu.org>

>>> >> Subject: Re: [Discuss] Problem accessing blu.org

>>> >>

>>> >>

>>> >>

>>> >> One wonders if COMCAST is an ISP or just an infotainment company

>>> >> providing

>>> >>

>>> >> Web access to related media properties only.

>>> >>

>>> >>

>>> >>

>>> >> Perhaps COMCAST has blackholed the BLU IP address because it has a

>>> >>

>>> >> mailserver/Listserve and isn't named Google or Yahoo or AOL and thus

>>> is

>>> >>

>>> >> misdiagnosed as an infected site or worm control node :-/  .

>>> >>

>>> >>

>>> >>

>>> >> If it helps, from VZ FIOS

>>> >>

>>> >> traceroute to 216.235.254.230 (216.235.254.230), 30 hops max, 60

>>> byte

>>> >>

>>> >> packets

>>> >>

>>> >> 1  172.17.2.1 (172.17.2.1)  0.573 ms  2.032 ms  2.167 ms

>>> >>

>>> >> 2  * * *

>>> >>

>>> >> 3  B3367.BSTNMA-LCR-21.verizon-gni.net (100.41.9.174)  9.625 ms

>>> >>

>>> >> B3367.BSTNMA-LCR-22.verizon-gni.net (100.41.9.176)  13.575 ms

>>> >>

>>> >> B3367.BSTNMA-LCR-21.verizon-gni.net (100.41.9.174)  11.152 ms

>>> >>

>>> >> 4  * * *

>>> >>

>>> >> 5  * * *

>>> >>

>>> >> 6  0.ae13.GW13.NYC1.ALTER.NET (140.222.234.193)  24.780 ms  11.364

>>> ms

>>> >>

>>> >> 0.ae11.GW13.NYC1.ALTER.NET (140.222.234.191)  17.289 ms

>>> >>

>>> >> 7  windstream-gw.customer.alter.net (204.148.1.234)  17.595 ms

>>> 17.132

>>> >> ms

>>> >>

>>> >> 17.585 ms

>>> >>

>>> >> 8  ae10-0.cr01.nycm01-ny.us.windstream.net (40.129.35.248)  15.832

>>> ms

>>> >>

>>> >> 14.770 ms  15.087 ms

>>> >>

>>> >> 9  h255.81.138.40.static.ip.windstream.net (40.138.81.255)  15.009

>>> ms

>>> >>

>>> >> 14.565 ms  13.248 ms

>>> >>

>>> >> 10  te-0-4-0-0.wrcmankgs04.onecommunications.net (64.69.99.239)

>>> 15.371

>>> >> ms

>>> >>

>>> >> 15.149 ms  17.693 ms

>>> >>

>>> >> 11  te-3-1.wrcsmank-r76-02.onecommunications.net (64.69.99.234)

>>> 15.472

>>> >> ms

>>> >>

>>> >> 22.063 ms  22.031 ms

>>> >>

>>> >> 12  static-72-248-107-33.mas.onecommunications.net (72.248.107.33)

>>> >> 17.148

>>> >>

>>> >> ms  15.806 ms  15.384 ms

>>> >>

>>> >> 13  vranix.blu.org (216.235.254.230)  11.826 ms !X  16.396 ms !X

>>> 9.762

>>> >> ms

>>> >>

>>> >> !X

>>> >>

>>> >>

>>> >>

>>> >>

>>> >>

>>> >> I do like how an HTTP connection to the real hostname or IP address

>>> >>

>>> >> provides a choice page to select the virtual site ! Nice touch.

>>> >>

>>> >>

>>> >>

>>> >> 216.235.254.230

>>> >>

>>> >>

>>> >>

>>> >> This server belongs to Boston Linux & UNIX <http://blu.org>, a

Linux

>>> and

>>> >>

>>> >> UNIX user group.

>>> >>

>>> >> ------------------------------

>>> >>

>>> >> Guest Websites

>>> >>

>>> >>

>>> >>

>>> >>     1. BUGC <http://www.bugc.org>

>>> >>

>>> >>     2. HeliVets <http://www.heli-vets.net>

>>> >>

>>> >>     3. VHCMA <http://www.vhcma.org>

>>> >>

>>> >>     4. VHFCN <http://www.vhfcn.org>

>>> >>

>>> >>     5. VHPAF <http://www.vhpaf.org>

>>> >>

>>> >>

>>> >>

>>> >>

>>> >>

>>> >> _______________________________________________

>>> >>

>>> >> Discuss mailing list

>>> >>

>>> >> Discuss at lists.blu.org

>>> >>

>>> >> http://lists.blu.org/mailman/listinfo/discuss

>>> >>

>>> >>

>>> >>

>>> >> _______________________________________________

>>> >> Discuss mailing list

>>> >> Discuss at lists.blu.org

>>> >> http://lists.blu.org/mailman/listinfo/discuss

>>> >>

>>> >

>>> >

>>> > --

>>> > --

>>> > Jerry Feldman <gaf.linux at gmail.com>

>>> > Boston Linux and Unix

>>> > PGP key id: 6F6BB6E7

>>> > Key fingerprint: 0EDC 2FF5 53A6 8EED 84D1  3050 5715 B88D 6F6B B6E7

>>> >

>>> 

>>> 

>>> --

>>>        Derek Atkins                 617-623-3745

>>>        derek at ihtfp.com             www.ihtfp.com

>>>        Computer and Internet Security Consultant

>>> 

>>> 

>> 

>> --

>> --

>> Jerry Feldman <gaf.linux at gmail.com>

>> Boston Linux and Unix

>> PGP key id: 6F6BB6E7

>> Key fingerprint: 0EDC 2FF5 53A6 8EED 84D1  3050 5715 B88D 6F6B B6E7

>> 

> 

> 

> --

> --

> Jerry Feldman <gaf.linux at gmail.com>

> Boston Linux and Unix

> PGP key id: 6F6BB6E7

> Key fingerprint: 0EDC 2FF5 53A6 8EED 84D1  3050 5715 B88D 6F6B B6E7

> 

--

        Derek Atkins                 617-623-3745

        derek at ihtfp.com             www.ihtfp.com

        Computer and Internet Security Consultant

-- 

--

Jerry Feldman <gaf.linux at gmail.com>

Boston Linux and Unix

PGP key id: 6F6BB6E7

Key fingerprint: 0EDC 2FF5 53A6 8EED 84D1  3050 5715 B88D 6F6B B6E7

_______________________________________________

Discuss mailing list

Discuss at lists.blu.org

http://lists.blu.org/mailman/listinfo/discuss