We are doing BGP
Yes it does fail from downstream routers.
Yes, it is a /30
On 9/7/2016 10:13 PM, George Skorup wrote:
Does it pass or fail from downstream routers? Traffic originating from
your router will use the exit interface's IP as the source address in
the ICMP packets. Since it's your edge, that'd be your upstream's
address space (I'm guessing they gave you one side of a /30). So try
setting the source address for the traceroute to that router's
loopback address (that's hopefully in your address space) and see what
you get. It's entirely possible that they've blocked your entire
prefix. Or if you're doing BGP, maybe your announcement isn't making
it to them (or their upstream(s)).
On 9/7/2016 9:56 PM, David Milholen wrote:
Ok,
I have an ip for a website that cannot be reached by our clients.
At first I checked DNS behavior and the nslookups are fine.
So, I started checking all of our ip blacklists and nothing showed up.
I then started some trace routes and from a host computer it will not
complete but from an edge router using ping tool in the mikrotik I
was able to ping the site
and do a complete traceroute.
At this point I am thinking a firewall issue but after disabling
every rule still nothing from the host and this is from different
host on different sites that cannot access this site.
SO now im stuck.. Why can an edge see this site but nothing else
beyond the edge can???
IM LIKE WUT DA WUT!
Thanks
Dazed and confused LOL
--
--
