October 2004 - NZNOG - lists.nznog.org

RE: [nznog] Ameritrade.com smtp server issue
by Gordon Smith 08 Oct '04

08 Oct '04

Looks like a Sprint routing issue. Ameritrade are a customer of alter.net & they should be reachable via Savvis when going across Sprint: 8 sl-bb24-ana-10-2.sprintlink.net (144.232.1.205) 133.225 ms 132.062 ms 132.340 ms 9 sl-st21-la-13-0.sprintlink.net (144.232.20.69) 134.608 ms 135.151 ms 134.132 ms 10 bpr2-so-3-0-0.LosAngelesEquinix.savvis.net (208.174.196.73) 132.760 ms 132.626 ms 133.118 ms 11 bpr1-ae0.LosAngelesEquinix.savvis.net (208.172.35.49) 134.405 ms 134.300 ms 134.417 ms 12 bpr1-so-5-0-0.LosAngeles.savvis.net (208.173.57.61) 140.357 ms 135.033 ms 134.136 ms 13 dcr1-ae1-0.LosAngeles.savvis.net (208.172.47.1) 136.275 ms 134.696 ms dcr2-ae1-0.LosAngeles.savvis.net (208.172.47.13) 133.501 ms 14 dcr2-loopback.SanFranciscosfo.savvis.net (206.24.210.100) 139.084 ms 137.953 ms 140.427 ms 15 bpr2-so-4-0-0.SanJoseEquinix.savvis.net (206.24.211.78) 137.337 ms 136.382 ms 136.519 ms 16 POS3-3.BR1.SJC7.ALTER.NET (208.173.55.2) 137.376 ms 137.765 ms * Alter.net's backbone is reachable, but not all their routes are.... Cheers, Gordon > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Friday, 8 October 2004 12:36 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Ameritrade.com smtp server issue > > > Hi people, we are having issues sending mail to Ameritrade.com. > > It looks like their firewall is dropping the smtp connection > to smtp.ameritrade.com (199.200.9.140) from us. > > I can connect to it from our US server and they claim that > they have lots of NZ customers with no issues. > > So I think they are blocking the 210 block of addresses (we show up as > 210.48.112) because we share that with Korea. > (This is not a mail server block, we don't get a connection > to the mail server, so it must be the firewall in front) > > Could get some of you to try to telnet to smtp.ameritrade.com on port > 25 and let me know the result and the block it's coming from? > > I need some concrete evidence. > > Thanks. > > > jfp. > > -------------------------------------------------------------- > ---------- > Jean-Francois Pirus <jfp(a)clearfield.com> Senior > Software Engineer > Phone (+64-9) 358 2081 Clearfield > Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 > Whitaker Place > Mob (+64-21) 640 779 P O Box 2348 Auckland, > New Zealand > -------------------------------------------------------------- > ---------- > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

2 1

Re: [nznog] Ameritrade.com smtp server issue
by Jean-Francois Pirus 08 Oct '04

08 Oct '04

Thanks for the data guys. I am getting a vast majority of failures so it's a bit more widespread than expected. I will collate it and ask them to review their response :-) Thanks again. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

2 1

RE: [nznog] Ameritrade.com smtp server issue
by Michael Bordignon 08 Oct '04

08 Oct '04

> It looks like their firewall is dropping the smtp connection to > smtp.ameritrade.com (199.200.9.140) from us. timing out for me too - seems as though they're firewalling everything, as even tcptraceroute fails 8 sl-bb21-sj-3-2.sprintlink.net (144.232.8.130) 188.567 ms 189.587 ms 188.584 ms 9 sl-bb24-sj-13-0.sprintlink.net (144.232.3.214) 188.096 ms 185.861 ms 190.153 ms 10 sl-bb21-stk-12-0.sprintlink.net (144.232.20.180) 278.218 ms 196.284 ms 201.601 ms 11 sl-bb22-kc-2-0.sprintlink.net (144.232.20.168) 230.531 ms 231.154 ms 233.457 ms 12 sl-gw10-kc-6-0.sprintlink.net (144.232.23.82) 234.645 ms 233.974 ms 232.707 ms 13 sl-think1-6-0.sprintlink.net (144.224.22.6) 234.018 ms 233.321 ms 234.457 ms 14 * * Michael

1 0

RE: [nznog] Ameritrade.com smtp server issue
by Craig Humphrey 07 Oct '04

07 Oct '04

Looks like a connectivity issue between Sprint and UUNet/Alternet. Here's a couple of traces, one from London, one from Virginia. Please excuse the excessive layout. [Virginia] Report for smtp.ameritrade.com [199.200.9.140] Analysis: Connections to SMTP port 25 on host 'smtp.ameritrade.com' are working, but ICMP packets are being blocked past network "UUNET Technologies, Inc. UUNETCUSTB40" at hop 10. It is a SMTP server (ESMTP Server ready). ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- | 0 | | 161.58.180.113 | WIN10115.visualware.com | Dulles, VA, USA | -05:00 | | | Verio, Inc. VRIO-161-058 | | 1 | | 161.58.176.129 | - | ?Englewood, CO | | 0 | x | Verio, Inc. VRIO-161-058 | | 2 | | 161.58.156.140 | - | ?Englewood, CO | | 0 | x | Verio, Inc. VRIO-161-058 | | 3 | | 129.250.28.206 | xe-1-2-0-3.r20.asbnva01.us.bb.verio.net | Ashburn, VA, USA | -05:00 | 0 | x | Verio, Inc. VRIO-129-250 | | 4 | | 129.250.9.70 | p16-0.uunet.asbnva01.us.bb.verio.net | Ashburn, VA, USA | -05:00 | 0 | x | Verio, Inc. VRIO-129-250 | | 5 | | 152.63.43.182 | 0.so-2-2-0.XL1.DCA5.ALTER.NET | Washington, DC, USA | -05:00 | 0 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 6 | | 152.63.25.37 | 0.so-2-0-0.TL1.DCA8.ALTER.NET | Washington, DC, USA | -05:00 | 0 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 7 | | 152.63.0.126 | 0.so-1-2-0.TL1.STL3.ALTER.NET | St. Louis, MO, USA | -06:00 | 15 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 8 | | 152.63.88.58 | 0.so-7-0-0.CL1.KCY4.ALTER.NET | Kansas City, MO, USA | -06:00 | 31 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 9 | | 152.63.93.185 | 179.ATM6-0.GW3.KCY4.ALTER.NET | Kansas City, MO, USA | -06:00 | 31 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 10 | | 157.130.165.126 | ameritrade-gw.customer.alter.net | ?Ashburn, VA, USA | -05:00 | 31 | x- | UUNET Technologies, Inc. UUNETCUSTB40 | | ... | | | | | | | | | | ? | | 199.200.9.140 | smtp.ameritrade.com | | | | | AccuTrade, Inc. ACTRADE | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- [London] Report for smtp.ameritrade.com [199.200.9.140] Analysis: IP packets are being lost past network "Sprint SPRINT-INNET1" at hop 19. VisualRoute cannot determine the next network at hop 20. Connections to SMTP port 25 are not working. ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- | 0 | | 192.168.101.239 | visualroute.visualware.co.uk | ... | | | | (private use) | | 1 | | 192.168.101.254 | - | ... | | 0 | x | (private use) | | 2 | | 195.167.164.1 | - | ?London, UK | * | 0 | x | Richmond Software | | 3 | | 195.167.252.170 | s12-1-7.access2.lon1.uk.vital-group.net | ?London, UK | * | 21 | x------ | IPCENTA Ltd | | 4 | | 195.167.248.1 | - | ?London, UK | * | 0 | x | Vital International | | 5 | | 134.222.109.173 | ldn-s2-rou-1002.UK.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 6 | | 134.222.231.61 | ldn-s2-rou-1001.UK.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 7 | | 134.222.230.145 | obl-rou-1003.NL.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 8 | | 134.222.229.237 | ledn-rou-1001.NL.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 2 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 9 | | 134.222.254.2 | ewr-brdr-02.inet.qwest.net | Newark, NJ, USA | -05:00 | 78 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 10 | | 205.171.17.125 | ewr-core-01.inet.qwest.net | Newark, NJ, USA | -05:00 | 79 | x | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 11 | | 205.171.17.62 | nyc-brdr-01.inet.qwest.net | New York, NY, USA | -05:00 | 78 | x | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 12 | | 205.171.1.134 | - | Denver, CO, USA | -07:00 | 90 | x---- | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 13 | | 144.232.13.1 | sl-bb25-nyc-11-0.sprintlink.net | New York, NY, USA | -05:00 | 159 | --x-- | Sprint SPRINT-INNET9 | | 14 | | 144.232.9.156 | sl-bb24-chi-2-0.sprintlink.net | Chicago, IL, USA | -06:00 | 121 | x---- | Sprint SPRINT-INNET9 | | 15 | | 144.232.26.110 | sl-bb22-chi-9-0.sprintlink.net | Chicago, IL, USA | -06:00 | 134 | -x----- | Sprint SPRINT-INNET9 | | 16 | | 144.232.19.202 | sl-bb20-kc-14-2.sprintlink.net | Kansas City, MO, USA | -06:00 | 133 | -x----- | Sprint SPRINT-INNET9 | | 17 | | 144.232.2.118 | sl-bb21-kc-15-0.sprintlink.net | Kansas City, MO, USA | -06:00 | 109 | x | Sprint SPRINT-INNET9 | | 18 | | 144.232.23.74 | sl-gw10-kc-5-0.sprintlink.net | Kansas City, MO, USA | -06:00 | 109 | x | Sprint SPRINT-INNET9 | | 19 | | 144.224.22.6 | sl-think1-6-0.sprintlink.net | - | | 110 | x- | Sprint SPRINT-INNET1 | | ... | | | | | | | | | | ? | | 199.200.9.140 | smtp.ameritrade.com | Omaha, NE, USA | | | | AccuTrade, Inc. ACTRADE | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Friday, October 08, 2004 12:36 PM > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Ameritrade.com smtp server issue > > > Hi people, we are having issues sending mail to Ameritrade.com. > > It looks like their firewall is dropping the smtp connection to > smtp.ameritrade.com (199.200.9.140) from us. > > I can connect to it from our US server and they claim that they have > lots of NZ customers with no issues. > > So I think they are blocking the 210 block of addresses (we show up as > 210.48.112) because we share that with Korea. > (This is not a mail server block, we don't get a connection > to the mail > server, so it must be the firewall in front) > > Could get some of you to try to telnet to smtp.ameritrade.com on port > 25 and let me know the result and the block it's coming from? > > I need some concrete evidence. > > Thanks. > > > jfp. > > -------------------------------------------------------------- > ---------- > Jean-Francois Pirus <jfp(a)clearfield.com> Senior > Software Engineer > Phone (+64-9) 358 2081 Clearfield > Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 > Whitaker Place > Mob (+64-21) 640 779 P O Box 2348 Auckland, > New Zealand > -------------------------------------------------------------- > ---------- > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Ameritrade.com smtp server issue
by jfp 07 Oct '04

07 Oct '04

Hi people, we are having issues sending mail to Ameritrade.com. It looks like their firewall is dropping the smtp connection to smtp.ameritrade.com (199.200.9.140) from us. I can connect to it from our US server and they claim that they have lots of NZ customers with no issues. So I think they are blocking the 210 block of addresses (we show up as 210.48.112) because we share that with Korea. (This is not a mail server block, we don't get a connection to the mail server, so it must be the firewall in front) Could get some of you to try to telnet to smtp.ameritrade.com on port 25 and let me know the result and the block it's coming from? I need some concrete evidence. Thanks. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer Phone (+64-9) 358 2081 Clearfield Software Ltd Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place Mob (+64-21) 640 779 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

3 2

RE: [nznog] Ameritrade.com smtp server issue
by Craig Humphrey 07 Oct '04

07 Oct '04

We're blocked at 210.86.19.x and 210.55.180.x > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Friday, October 08, 2004 12:36 PM > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Ameritrade.com smtp server issue > > > Hi people, we are having issues sending mail to Ameritrade.com. > > It looks like their firewall is dropping the smtp connection to > smtp.ameritrade.com (199.200.9.140) from us. > > I can connect to it from our US server and they claim that they have > lots of NZ customers with no issues. > > So I think they are blocking the 210 block of addresses (we show up as > 210.48.112) because we share that with Korea. > (This is not a mail server block, we don't get a connection > to the mail > server, so it must be the firewall in front) > > Could get some of you to try to telnet to smtp.ameritrade.com on port > 25 and let me know the result and the block it's coming from? > > I need some concrete evidence. > > Thanks. > > > jfp. > > -------------------------------------------------------------- > ---------- > Jean-Francois Pirus <jfp(a)clearfield.com> Senior > Software Engineer > Phone (+64-9) 358 2081 Clearfield > Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 > Whitaker Place > Mob (+64-21) 640 779 P O Box 2348 Auckland, > New Zealand > -------------------------------------------------------------- > ---------- > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

RE: [nznog] NZ Linux mirrors
by Craig Humphrey 07 Oct '04

07 Oct '04

I've also updated the WLUG Wiki page: http://www.wlug.org.nz/NewZealandLinuxMirrors Thanks to "Aristotle Pagaltzis" for editing my first attempt at Wiki layout. > -----Original Message----- > From: Mark Foster [mailto:blakjak(a)blakjak.net] > Sent: Thursday, October 07, 2004 5:43 PM > To: nznog(a)list.waikato.ac.nz > Cc: nzlug(a)linux.net.nz > Subject: Re: [nznog] NZ Linux mirrors [snip snip] > At the risk of responding to myself - its now online: > > http://www.linux.net.nz/node/view/75 > > > NZLUG: A list of currently known Linux mirrors is now > published on the LUG > site as per above. :) > Apologies for the crosspost. > > Cheers > Mark.

2 1

NZ Linux mirrors
by Craig Humphrey 07 Oct '04

07 Oct '04

Hi people, Ok, was bored an inquisitive today, so did a little Google and came up with the following Linux mirror sites in NZ, there's even a few FreeBSD ones tagged on the end. If anyone's aware of any others, please let me know and I'll maintain an informal list (and notify linux.net.nz and WLUG). If my boss lets me, I'll stick it on a website too... Later'ish Craig Linux Kernel www.nz.kernel.org ftp.ihug.co.nz/Linux/kernels/kernel/ ftp://linux.jetstreamgames.co.nz/dist/kernel/ Caos ftp://linux.jetstreamgames.co.nz/dist/caos Debian ftp.ihug.co.nz/Linux/CD-images/Debian-3.0/ ftp://debian.ihug.co.nz/debian/ ftp://debian.ihug.co.nz/debian-non-US/ ftp://debian.paradise.net.nz/ ftp://debian.co.nz/Debian/ ftp://linux.jetstreamgames.co.nz/dist/debian/ ftp://linux.jetstreamgames.co.nz/dist/debian-cd/ ftp://linux.jetstreamgames.co.nz/dist/debian-non-US/ ftp://linux.jetstreamgames.co.nz/dist/debian-security/ ftp.jetstreamgames.co.nz/debian/ ftp.jetstreamgames.co.nz/debian-non-US/ ftp.jetstreamgames.co.nz/debian-security/ ftp://ftp.tranzpeer.net/debian/ ftp://ftp.tranzpeer.net/debian-backports/ ftp://ftp.tranzpeer.net/debian-cd/ ftp://ftp.tranzpeer.net/debian-non-US/ ftp://ftp.tranzpeer.net/debian-security/ ftp.nz.debian.org/debian/ (ftp.citylink.co.nz) WIX only (there may be other distros on here) ftp://mirror.inspire.net.nz/debian/ ftp://mirror.inspire.net.nz/debian-backports/ ftp://mirror.inspire.net.nz/debian-cd/ ftp://mirror.inspire.net.nz/debian-non-US/ ftp://mirror.inspire.net.nz/debian-security/ Fedora ftp.wicks.co.nz/pub/linux/dist/fedora/ ftp.ihug.co.nz/Linux/CD-images/Fedora/ ftp://debian.co.nz/Fedora linux.jetstreamgames.co.nz/fedora/ Gentoo ftp.ihug.co.nz/Linux/CD-images/Gentoo-1.2/ ftp://debian.co.nz/Gentoo/ ftp://linux.jetstreamgames.co.nz/dist/gentoo/ ftp://linux.jetstreamgames.co.nz/dist/gentoo-portage/ ftp://linux.jetstreamgames.co.nz/dist/gentoo-x86-portage/ Knoppix ftp.ihug.co.nz/Linux/CD-images/Knoppix-3.3/ ftp://debian.co.nz/Knoppix/ ftp://linux.jetstreamgames.co.nz/dist/knoppix/ ftp://mirror.inspire.net.nz/knoppix/ Mandrake ftp.ihug.co.nz/Linux/CD-images/Mandrake-9.2/ ftp://debian.co.nz/Mandrake/ ftp://linux.jetstreamgames.co.nz/dist/mandrake/ ftp://ftp.tranzpeer.net/mandrake/ ftp://mirror.inspire.net.nz/mandrake/ RedHat ftp.ihug.co.nz/Linux/CD-images/RedHat-9.0/ ftp.redhat.co.nz/pub/linux/dist/redhat/ (ftp.wicks.co.nz) ftp://ftp.tranzpeer.net/redhat/ ftp://mirror.inspire.net.nz/Redhat 9.0/ ftp://mirror.inspire.net.nz/Redhat%208.0/ ftp://mirror.inspire.net.nz/Redhat%207.3/ Slackware ftp.ihug.co.nz/Linux/CD-images/Slackware-9.1/ ftp://debian.co.nz/Slackware/ Suse ftp://linux.jetstreamgames.co.nz/dist/suse/ Xandros ftp://debian.co.nz/Xandros/ Yoper ftp://linux.jetstreamgames.co.nz/dist/yoper/ ftp://nz1.yoper.com/pub/ Other ftp.ihug.co.nz/Linux/CD-images/Floppyfw-2.04-FloppyFirewall/ ftp.ihug.co.nz/Linux/CD-images/Freesco-0.27-FloppyDistro/ FreeBSD ftp://debian.co.nz/FreeBSD/ ftp://linux.jetstreamgames.co.nz/dist/freebsd/ ftp://ftp.nz.freebsd.org/pub/FreeBSD/ (ftp.tranzpeer.net) ftp://mirror.inspire.net.nz/FreeBSD/

3 3

RE: [nznog] NZ Linux mirrors
by Craig Humphrey 07 Oct '04

07 Oct '04

If I get the go-ahead to set up a site/page with this, I'll set up something to check for "up-to-date-ness". Still, at least these ones exist, unlike many I tried. (unless they're all hiding behind WIX only routes) > -----Original Message----- > From: Barry Murphy [mailto:barry(a)unix.co.nz] > Sent: Thursday, October 07, 2004 5:03 PM > To: Craig Humphrey; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] NZ Linux mirrors > > Hi, > > A number of the links you have shown, i.e. debian.paradise.net.nz are > generally out of date thus of no use. But good work anyways. > > Barry

1 0

RE: [nznog] Modem Pool's
by Wayne Kampjes 07 Oct '04

07 Oct '04

Telecom do a Remote Private Office Network http://www.telecom.co.nz/content/0,3900,201876-201214,00.html Cheers Wayne -----Original Message----- From: Craig Humphrey [mailto:Craig.Humphrey(a)chapmantripp.com] Sent: Thursday, 7 October 2004 11:43 To: nznog(a)list.waikato.ac.nz Subject: RE: [nznog] Modem Pool's If you're going to make it that complex, VPN'ing, etc. Why not VPN over the internet? > -----Original Message----- > From: Geraint Jones [mailto:g.jones(a)french-maid.co.nz] > Sent: Thursday, October 07, 2004 11:34 AM > To: Matthew Poole > Cc: nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] Modem Pool's > > To our head office, so I would be looking to maybe have a box > in a rack > with a pool attached so I can then VPN the traffic back to > head office, > as pictured below. > > Sales Reps > | > Modem Pool > | > My Colo'd Server > | > |---VPN Over the net > | > Server at head office > > > > Geraint Jones > Systems Administrator > French Maid Foods Limited > www.french-maid.net > > Tel: +64 (0)4 568 2687 > Fax: +64 (0)4 568 2345 > Mob: +64 (0)21 739 240 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1