Re: Debian website is blocked in Argentina. Or it's a misconfiguration?

2023-04-04 Thread marito...@yahoo.com
After a few hours it can be marked as fixed.

Since Debian 6 I use Brazilian mirrors, and nothing like this ever happened 
before.

I would blame those cheap ISP's that were blocking since March 18th.

Thanks Debian project.



Re: Debian website is blocked in Argentina. Or it's a misconfiguration?

2023-04-04 Thread Pierre-Elliott Bécue
Pierre-Elliott Bécue  wrote on 04/04/2023 at 11:13:46+0200:

> [[PGP Signed Part:Good signature from EE215B9FB8C45B0B Pierre-Elliott Bécue 
>  (trust ultimate) created at 2023-04-04T11:22:55+0200 using 
> RSA]]
> Adding DSA as this is a DNS matter which falls under our scope.
>
> "marito...@yahoo.com"  wrote on 04/04/2023 at 
> 05:36:35+0200:
>
>> I will start comparing some domains:
>>
>> root@LEDE:~# nslookup debian.org 1.1.1.1
>> Server: 1.1.1.1
>> Address:    1.1.1.1#53
>>
>> Name:  debian.org
>> Address 1: 130.89.148.77
>> Address 2: 128.31.0.62
>> Address 3: 149.20.4.15
>> Address 4: 2603:400a::bb8::801f:3e
>> Address 5: 2001:67c:2564:a119::77
>> Address 6: 2001:4f8:1:c::15
>>
>> root@LEDE:~# nslookup www.debian.org 1.1.1.1
>> Server: 1.1.1.1
>> Address:    1.1.1.1#53
>>
>> Name:  www.debian.org
>> Address 1: 200.17.202.197
>> Address 2: 2801:82:80ff:8009:e61f:13ff:fe63:8e88
>>
>>
>> The second one only gives Brazilian IP. Why?. Cannot be viewed here. 
>> Manually editing hosts can "fix" this problem.
>>
>> 200.17.202.197 is from UFPR, a blocked network by Telecom Argentina and 
>> Internexa. Well, the entire AS1916 (including ftp.br.debian.org, uepg, 
>> c3sl...).
>>
>> Further explanations here: (spanish)
>> https://foros.3dgames.com.ar/threads/315307?p=24601216&viewfull=1#post24601216
>> https://foros.3dgames.com.ar/threads/315307?p=24602387&viewfull=1#post24602387
>
> www.debian.org name resolution is done through GeoIP DNS (multiple
> mirrors over multiple continents). For South America in general, the
> only record we put for www.debian.org is santoro.debian.org which is
> hosted in brazil.
>
> The solution here would probably to put an exception on Argentina and
> put the IP of a US server for GeoIP DNS.
>
> I'll see with my DSA Teammates if that's fine with them and consider
> this option.

After discussing with them internally, it is our opinion that you should
probably bring this matter with your ISP as it's not really normal that
they block a whole network on web ports.

On our side, we do not want to do specific work for specific ISPs having
what looks like a bad policy.

Regards,
-- 
PEB


signature.asc
Description: PGP signature


Re: Debian website is blocked in Argentina. Or it's a misconfiguration?

2023-04-04 Thread Pierre-Elliott Bécue
Adding DSA as this is a DNS matter which falls under our scope.

"marito...@yahoo.com"  wrote on 04/04/2023 at 
05:36:35+0200:

> I will start comparing some domains:
>
> root@LEDE:~# nslookup debian.org 1.1.1.1
> Server: 1.1.1.1
> Address:    1.1.1.1#53
>
> Name:  debian.org
> Address 1: 130.89.148.77
> Address 2: 128.31.0.62
> Address 3: 149.20.4.15
> Address 4: 2603:400a::bb8::801f:3e
> Address 5: 2001:67c:2564:a119::77
> Address 6: 2001:4f8:1:c::15
>
> root@LEDE:~# nslookup www.debian.org 1.1.1.1
> Server: 1.1.1.1
> Address:    1.1.1.1#53
>
> Name:  www.debian.org
> Address 1: 200.17.202.197
> Address 2: 2801:82:80ff:8009:e61f:13ff:fe63:8e88
>
>
> The second one only gives Brazilian IP. Why?. Cannot be viewed here. Manually 
> editing hosts can "fix" this problem.
>
> 200.17.202.197 is from UFPR, a blocked network by Telecom Argentina and 
> Internexa. Well, the entire AS1916 (including ftp.br.debian.org, uepg, 
> c3sl...).
>
> Further explanations here: (spanish)
> https://foros.3dgames.com.ar/threads/315307?p=24601216&viewfull=1#post24601216
> https://foros.3dgames.com.ar/threads/315307?p=24602387&viewfull=1#post24602387

www.debian.org name resolution is done through GeoIP DNS (multiple
mirrors over multiple continents). For South America in general, the
only record we put for www.debian.org is santoro.debian.org which is
hosted in brazil.

The solution here would probably to put an exception on Argentina and
put the IP of a US server for GeoIP DNS.

I'll see with my DSA Teammates if that's fine with them and consider
this option.

-- 
PEB


signature.asc
Description: PGP signature


Debian website is blocked in Argentina. Or it's a misconfiguration?

2023-04-03 Thread marito...@yahoo.com
I will start comparing some domains:

root@LEDE:~# nslookup debian.org 1.1.1.1
Server: 1.1.1.1
Address:    1.1.1.1#53

Name:  debian.org
Address 1: 130.89.148.77
Address 2: 128.31.0.62
Address 3: 149.20.4.15
Address 4: 2603:400a::bb8::801f:3e
Address 5: 2001:67c:2564:a119::77
Address 6: 2001:4f8:1:c::15

root@LEDE:~# nslookup www.debian.org 1.1.1.1
Server: 1.1.1.1
Address:    1.1.1.1#53

Name:  www.debian.org
Address 1: 200.17.202.197
Address 2: 2801:82:80ff:8009:e61f:13ff:fe63:8e88


The second one only gives Brazilian IP. Why?. Cannot be viewed here. Manually 
editing hosts can "fix" this problem.

200.17.202.197 is from UFPR, a blocked network by Telecom Argentina and 
Internexa. Well, the entire AS1916 (including ftp.br.debian.org, uepg, c3sl...).

Further explanations here: (spanish)
https://foros.3dgames.com.ar/threads/315307?p=24601216&viewfull=1#post24601216
https://foros.3dgames.com.ar/threads/315307?p=24602387&viewfull=1#post24602387

Greetings. 
Mario.