-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dva pyti veche pravia preduprezhdenie kym ISP-to chrez rykovodstvoto na SU-NET, za da pisha v tozi list, iavno ne e imalo kakvato i da e reakcia.. a mina dosta vreme.
Obiasniavam tochnata kartina: Samia SU-NET e zabranil izhodiashti ICMP-port-inreachable i ICMP-host-unreachable, kakto i ICMP-echo-request. No ne e zabranil vhodiashti ICMP-port-inreachable i ICMP-host-unreachable. T.e. BSD style traceroute triabva da si raboti, shtoto shemata mu e UDP request i posledvasht otgovor ot tipa na ICMP-port-unreachable ili ICMP-host-unreachable. Na praktika BG adresnoto prostranstvo e dostizhimo: - -bash-2.05b$ traceroute www.hit.bg traceroute to hit.bg (195.24.37.245), 30 hops max, 38 byte packets 1 nat-router.backbone-1.vpn.lcpe.uni-sofia.bg (192.168.100.1) 1.150 ms 0.529 ms 0.442 ms 2 eth-out.backbone-1.lcpe.uni-sofia.bg (62.44.103.2) 0.784 ms 0.524 ms 0.606 ms 3 loz-l3sw.uni-sofia.bg (62.44.96.65) 1.165 ms 1.097 ms 1.109 ms 4 lozgw-man.uni-sofia.bg (62.44.96.238) 1.139 ms 1.112 ms 1.087 ms 5 su-gw.uni-sofia.bg (62.44.96.5) 1.170 ms * 1.809 ms 6 Fa0-0-alpha.Sofia.netissat.net (212.72.192.221) 1.897 ms 2.136 ms 1.702 ms 7 Gi0-0-beta.Sofia.netissat.net (212.72.193.51) 2.094 ms 3.249 ms 3.048 ms 8 netissat-gw.Peers.Sofia.0rbitel.net (213.222.51.117) 4.890 ms 10.877 ms 3.936 ms 9 ed1-daffy.Sofia.0rbitel.net (195.24.32.148) 3.343 ms 2.973 ms 2.524 ms 10 hit.bg (195.24.37.245) 4.292 ms 2.775 ms 3.353 ms - -bash-2.05b$ koeto ne mozhe da se kazhe za non-BG AS: - -bash-2.05b$ traceroute www.linux.de traceroute to www.linux.de (62.111.65.66), 30 hops max, 38 byte packets 1 nat-router.backbone-1.vpn.lcpe.uni-sofia.bg (192.168.100.1) 0.581 ms 0.516 ms 0.431 ms 2 eth-out.backbone-1.lcpe.uni-sofia.bg (62.44.103.2) 0.621 ms 0.580 ms 0.524 ms 3 loz-l3sw.uni-sofia.bg (62.44.96.65) 1.198 ms 1.180 ms 1.125 ms 4 lozgw-man.uni-sofia.bg (62.44.96.238) 1.150 ms 2.286 ms 1.010 ms 5 su-gw.uni-sofia.bg (62.44.96.5) 1.316 ms 1.657 ms 1.293 ms 6 Fa0-0-alpha.Sofia.netissat.net (212.72.192.221) 1.708 ms 2.002 ms 2.981 ms 7 Gi0-0-gamma.Sofia.netissat.net (212.72.193.52) 2.562 ms 1.838 ms 2.241 ms 8 Gi0-0-vout2.Sofia.netissat.net (212.72.192.218) 3.768 ms 3.861 ms 2.971 ms 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * - -bash-2.05b$ Problemyt e s non-BG AS. Exporta na AS-a na NetisSat stava prez BTC-NET. Tuk niakoi govoreshe za SpNet.. niama takova neshto. Ima vyzmozhen export prez AS-a na SpNet, no po default e prez AS-a na BTC-NET. Importa pyk e prez Taide. Osven tova problemyt ne e na SU, a na dostavchika, zashtoto ot nego stradat dosta corporativni clienti... Eto pokazvam kak izglezhda veselata kartinka ot expo-2000: [EMAIL PROTECTED] diag]$ traceroute www.linux.de traceroute to www.linux.de (62.111.65.66), 30 hops max, 38 byte packets 1 gw-expo-2000.Customers.netissat.net (212.72.193.245) 3.439 ms 3.414 ms 4.135 ms 2 Fe0-0-alpha.Sofia.netissat.net (212.72.193.62) 8.486 ms 18.099 ms 9.057 ms 3 Gi0-0-gamma.Sofia.netissat.net (212.72.193.52) 9.187 ms 10.308 ms 8.473 ms 4 Gi0-0-vout2.Sofia.netissat.net (212.72.192.218) 9.739 ms 8.857 ms 15.475 ms 5 * * * 6 * * * 7 * * * 8 * [EMAIL PROTECTED] diag]$ Kartinkata e edna i syshta. Ako pyk tolkova ne viarvash, vzemi otidi na http://www.netissat.bg/cgi-bin/lg.pl i opitai i ot tam traceroute kym non-BG AS. Po-razumno otkolkoto da se vkliuchvash ot netissat i da pravish traceroute do SU-NET AS. A zashto dostavchikyt e anti... Mi mislia, che tozi primer dostatychno dobre go opisva. Naskoro imah i sreshti ot vtori vid s tehnichesko lice ot tozi dostavchik po problemi na lipsa na export/import na HTTPS protocol pak za non-BG AS. Ploisnaha mi neveroiatnata glupost, che trafficyt ni bil assymetric i tova bil problema, pri uslovie, che tova mozhe da se proveri za 10 secundi i da se vidi, che ne e. Nai-nakraia storiha neshto i problema se opravi .. sled 4 dni. Da ne govorim, che tova kasaeshe proect za blizo 50000 dolata, chast ot koito shteshe da poluchi SU i che zapadnite kontragenti napraviha shtur scandal zashto HTTPS vryzki niama i se nalozhi za da niama podobni izdynki da go puskam prez alternativnata linia, koiato imame i koiato se prevyrna v zhensko syrce (t.e. vinagi ima miasto za oshte edin) i veche prez neia minava kakvo li ne... A sluchaino znaesh li kolko e platil po dogovor SU na NetisSat za da si praviat poslednite gargara sys SU-NET? Nikade v dogovorite niama klauza, v koiato ISP da mozhe da si zapazva pravoto da otraizava kakvoto i da e, zashtoto tova e na praktika ednostranno deistvie ot negova strana i promenia vida i kachestvoto na predlaganata usluga. Clientyt si e porychal naeta linia i tq triabva da e "chista". Problem na clienta e veche kak shte se spravia s floodove ot ne znam si koi poreden virus za MS OS-ite. Toi i ne mozhe da se spravi de. Ako doide flood, koito fizicheski da napylni liniata.. nikakvi firewalls ne mogat da pomognat. MInalata sedmica imashe floodove po MAN na BTK, koito napravo mozheha da razbiat vsiakakvi fantazii i nikoi ne mozha da gi spre. Ta kazhi mi kak da ne nareka tozi dostavchik... anti? Ne mu e tuk miastoto.. no e kraino vreme SU-NET da prestane da byde zhertva na manipulacii, da izleze na VLAN port prez MAN na BTK i da ima dynamichna marshrutizacia prez koito ISP iska za chuzhbina, a ne da plashta bezumni ceni i da poluchava sreshtu tiah oriazana usluga samo ot edin ISP (koito i da e toi). Pozdravi Beco > > ne e dobre taka de se kvalificirat dostavchicite. ako niakoi ima problem > e dobre da se oplakva na samoto isp, a ne da bitchva po listi kym nego. > > ot tova koeto vidiah, navyn i v bg si puska icmp-echo [0] pone. navyn > niama udp obache: > > > Tracing the route to www.uni-sofia.bg (62.44.96.4) > > 1 su.Customers.netissat.net (212.72.192.222) 4 msec 4 msec 0 msec > 2 www.uni-sofia.bg (62.44.96.4) [AS 5421] 0 msec 0 msec 0 msec > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 62.44.96.4, timeout is 2 seconds: > !!!!! > Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms > > Translating "www.yahoo.com"...domain server (212.72.193.55) [OK] > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 216.109.118.67, timeout is 2 seconds: > !!!!! > Success rate is 100 percent (5/5), round-trip min/avg/max = 400/400/404 ms > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 204.152.189.116, timeout is 2 seconds: > !!!!! > Success rate is 100 percent (5/5), round-trip min/avg/max = 468/468/472 ms > > vinagi mojesh da zvynnesh na `antidostavchika' i da govorish in person s > tiah. > > pozdravi, > > kp. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE/eo1F+48lZPXaa+MRAvBIAKDQEBhxRfFuYHQs7oXbxxuvI63BcACgti+x xaquQpRXVihS8MSdh0N8Y9M= =Oz4i -----END PGP SIGNATURE----- ============================================================================ A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html ============================================================================
