Hi Reinier, i dont think its just our modem seeing as its an orange wide issue for this particular server. And yes, am sure that at the point its only that server that is inaccessible. Funny thing though is that, all our other servers are accessible at that time.
We also have over a hundred clients hosted on that particular server but its only the ones on the orange network complaining. David, all our servers are setup similarly so ideally if one is having issues of this nature, you would expect it to be replicated across the other servers (normally happens) but in this case that aint happening. We are currently stumped and unfortunately, for us the techies i managed to get in touch with at orange were initially enthusiastic about helping out, but they have suddenly gone quiet on us (2 hours and counting). or maybe they are just out for lunch, urghhhh!!!! -- Jason Kinene Ssemakula Customer Support Node Six Elemental Edge +256752956585 +256414376419 www.nodesix.com www.elementaledge.com > Send LUG mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > http://kym.net/mailman/listinfo/lug > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of LUG digest..." > > > Today's Topics: > > 1. Re: Orange ISP issues (Reinier Battenberg) > 2. Re: Orange ISP issues (David Gelvin) > 3. Re: Orange ISP issues (Reinier Battenberg) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 23 Mar 2011 13:42:11 +0300 > From: Reinier Battenberg <[email protected]> > To: Uganda Linux User Group <[email protected]> > Subject: Re: [LUG] Orange ISP issues > Message-ID: <[email protected]> > Content-Type: text/plain; charset="iso-8859-1" > > Hi Jason, > > Is it your modem, or is it the orange proxy server that can not access > your > server. Quite a difference, we have had both situation with our isp. > > Is this a 'can not resolve name of the server' error, can not connect? Are > you > very sure that at that point, its only your server that is inaccesible? > > > The fact that there is a timing thing going on, and it disappears sounds > very > funky. Is there anything special on the site(s) you are working on, like > lots > of ajax that is refreshing or keeping a connection open? Anything special > that > might trigger an intrusion detection going 'eh, this is suspect, let me > block > this'? have you checked if you are blacklisted somewhere? > > Just thinking out aloud. Hope it leads to something. > > rgds, > reinier > > > > Here is our traceroute. Much more informative, except for the last line > (if a > more network savvy person could explain that last line arriving in Jasons > traceroute, but not in mine, that would be very interesting). I asked the > ISPs > a lot of times to allow us to traceroute in a decent way, so we can (help > them) debug. Orange is a notoriously * * * * traceroute. > > reinier@mountlab6:/var/www/finddistrict/loadall/MinOfWater$ traceroute > 96.30.62.148 > traceroute to 96.30.62.148 (96.30.62.148), 30 hops max, 60 byte packets > 1 ipcop.mountbatten.net (192.168.38.1) 1.235 ms 1.229 ms 2.371 ms > 2 41.220.13.21 (41.220.13.21) 3.681 ms 3.914 ms 4.083 ms > 3 41.220.12.129 (41.220.12.129) 28.869 ms 29.067 ms 29.270 ms > 4 192.168.12.1 (192.168.12.1) 76.372 ms 76.526 ms 76.654 ms > 5 192.168.145.1 (192.168.145.1) 76.702 ms 88.878 ms 89.008 ms > 6 41.220.12.41 (41.220.12.41) 76.568 ms 62.003 ms 62.120 ms > 7 41.220.12.49 (41.220.12.49) 434.968 ms 434.968 ms 435.052 ms > 8 if-ctu-edge-ci.data.co.ug (41.220.12.33) 435.147 ms 92.341 ms > 92.847 ms > 9 41.84.196.137 (41.84.196.137) 92.334 ms 92.474 ms 92.853 ms > 10 dsl-del-static-045.45.246.61.airtelbroadband.in (61.246.45.45) > 253.686 ms > 253.862 ms 254.015 ms > 11 125.62.187.134 (125.62.187.134) 442.491 ms 442.657 ms 442.777 ms > 12 125.62.187.126 (125.62.187.126) 732.373 ms 636.392 ms 636.516 ms > 13 xe-9-1-0.edge1.LosAngeles6.Level3.net (4.26.0.61) 587.056 ms 587.229 > ms > 527.205 ms > 14 vlan80.csw3.LosAngeles1.Level3.net (4.69.144.190) 520.340 ms > vlan60.csw1.LosAngeles1.Level3.net (4.69.144.62) 529.312 ms 529.352 ms > 15 ae-82-82.ebr2.LosAngeles1.Level3.net (4.69.137.25) 521.844 ms > ae-72-72.ebr2.LosAngeles1.Level3.net (4.69.137.21) 520.824 ms > ae-92-92.ebr2.LosAngeles1.Level3.net (4.69.137.29) 529.364 ms > 16 ae-3-3.ebr3.Dallas1.Level3.net (4.69.132.78) 520.180 ms 519.876 ms > 520.216 ms > 17 4.69.151.133 (4.69.151.133) 521.046 ms 4.69.151.157 (4.69.151.157) > 520.512 ms 732.740 ms > 18 ae-71-71.ebr1.Dallas1.Level3.net (4.69.151.138) 732.425 ms 739.954 > ms > ae-91-91.ebr1.Dallas1.Level3.net (4.69.151.162) 746.501 ms > 19 ae-14-14.ebr2.Chicago2.Level3.net (4.69.151.117) 604.503 ms 604.565 > ms > 608.046 ms > 20 ae-5-5.ebr2.Chicago1.Level3.net (4.69.140.193) 669.660 ms 669.780 ms > 669.903 ms > 21 ae-24-52.car4.Chicago1.Level3.net (4.69.138.38) 607.832 ms 607.956 > ms > 608.111 ms > 22 WBS-CONNECT.car4.Chicago1.Level3.net (4.71.102.134) 613.242 ms > 662.183 > ms 649.112 ms > 23 vl38.dsw3.chi2.wiredtree.com (173.199.135.230) 524.958 ms 525.292 ms > 524.900 ms > 24 * * * > 25 * * * > 26 * * * > 27 * * * > 28 * * * > 29 * * * > 30 * * * > > > > -- > rgds, > > Reinier Battenberg > Director > Mountbatten Ltd. > +256 758 801 749 > www.mountbatten.net > > > > On Wednesday 23 March 2011 13:18:38 Jason Kinene Ssemakula wrote: >> 96.30.62.148 > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <http://kym.net/pipermail/lug/attachments/20110323/80354f5e/attachment.html> > > ------------------------------ > > Message: 2 > Date: Wed, 23 Mar 2011 13:45:24 +0300 > From: David Gelvin <[email protected]> > To: Uganda Linux User Group <[email protected]> > Subject: Re: [LUG] Orange ISP issues > Message-ID: > <[email protected]> > Content-Type: text/plain; charset="iso-8859-1" > > On Wed, Mar 23, 2011 at 1:18 PM, Jason Kinene Ssemakula > <[email protected]>wrote: > >> Hi fellow competitor :-) >> >> the browser gives the standard cannot find this page error. And during >> the >> time the server is 'blocked', we can't ping it... > > > I can confirm that that host is accessible through MTN (and others) but > not > through Orange. It doesn't look like just a proxy issue- the host > responds > to pings from other ISPs, but not from Orange. > > Is it possible that the host is running some sort of active intrusion > detection system that may be blocking Orange IPs, perhaps after some sort > of > suspicious behavior (repeated failed login attempts, etc...)? > > It doesn't seem to be a routing issue as some neighboring IPs > (96.30.62.147; > 96.30.62.150) are perfectly accessible. > > I can only think of three possibilities: > > 1. Orange is blocking that specific IP address explicitly (seems very > unlikely) > 2. That host has some active filter / configuration that is filtering > Orange IP addresses. > 3. That host's routing tables are misconfigured in such a manner that > it > can't route to Orange IPs. > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <http://kym.net/pipermail/lug/attachments/20110323/ab1f4d68/attachment.html> > > ------------------------------ > > Message: 3 > Date: Wed, 23 Mar 2011 14:33:59 +0300 > From: Reinier Battenberg <[email protected]> > To: Uganda Linux User Group <[email protected]> > Subject: Re: [LUG] Orange ISP issues > Message-ID: <[email protected]> > Content-Type: text/plain; charset="iso-8859-15" > > Hi, > > We had a similar situation before, in that case, not the nodesix server > was > blacklisted, but almost all ugandan ISP ones. With the IPs that were > blocked > back then, all seems to be fine: > > http://www.spamhaus.org/query/bl?ip=41.202.225.145 Orange > http://www.spamhaus.org/query/bl?ip=41.202.225.146 More Orange > > (so, back then, orange used at least 2 public ips for their proxy servers) > > In our case it was apache's mod_security that was blocking IPs based on > blacklists. > > -- > rgds, > > Reinier Battenberg > Director > Mountbatten Ltd. > +256 758 801 749 > www.mountbatten.net > > > > On Wednesday 23 March 2011 13:45:24 David Gelvin wrote: >> On Wed, Mar 23, 2011 at 1:18 PM, Jason Kinene Ssemakula >> >> <[email protected]>wrote: >> > Hi fellow competitor :-) >> > >> > the browser gives the standard cannot find this page error. And during >> > the time the server is 'blocked', we can't ping it... >> >> I can confirm that that host is accessible through MTN (and others) but >> not >> through Orange. It doesn't look like just a proxy issue- the host >> responds >> to pings from other ISPs, but not from Orange. >> >> Is it possible that the host is running some sort of active intrusion >> detection system that may be blocking Orange IPs, perhaps after some >> sort >> of suspicious behavior (repeated failed login attempts, etc...)? >> >> It doesn't seem to be a routing issue as some neighboring IPs >> (96.30.62.147; 96.30.62.150) are perfectly accessible. >> >> I can only think of three possibilities: >> >> 1. Orange is blocking that specific IP address explicitly (seems very >> unlikely) >> 2. That host has some active filter / configuration that is filtering >> Orange IP addresses. >> 3. That host's routing tables are misconfigured in such a manner that >> it >> can't route to Orange IPs. > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <http://kym.net/pipermail/lug/attachments/20110323/2823d32d/attachment.html> > > ------------------------------ > > _______________________________________________ > The Uganda Linux User Group: http://linux.or.ug > > Send messages to this mailing list by addressing e-mails to: > [email protected] > Mailing list archives: http://www.mail-archive.com/[email protected]/ > Mailing list settings: http://kym.net/mailman/listinfo/lug > To unsubscribe: http://kym.net/mailman/options/lug > > The Uganda LUG mailing list is generously hosted by INFOCOM: > http://www.infocom.co.ug/ > > The above comments and data are owned by whoever posted them (including > attachments if any). The mailing list host is not responsible for them in > any way. > > End of LUG Digest, Vol 79, Issue 48 > *********************************** > _______________________________________________ The Uganda Linux User Group: http://linux.or.ug Send messages to this mailing list by addressing e-mails to: [email protected] Mailing list archives: http://www.mail-archive.com/[email protected]/ Mailing list settings: http://kym.net/mailman/listinfo/lug To unsubscribe: http://kym.net/mailman/options/lug The Uganda LUG mailing list is generously hosted by INFOCOM: http://www.infocom.co.ug/ The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.
