tug.ctan.org inaccessible on a specific machine
AC
achirvasub at gmail.com
Fri Apr 2 14:35:19 CEST 2021
Thank you.
I am still blocked, but this at least makes me hopeful spinning up a snapshot of this droplet with a different IP will get me access again.
Still baffling though..
On April 2, 2021 8:30:01 AM EDT, Henri Menke via tex-live <tex-live at tug.org> wrote:
>Hm, here everything seems to be fine.
>
>
>
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl -sSfL ipinfo.io/ip | xargs
>104.131.95.174
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# ping -c 5 tug.ctan.org
>PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of data.
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=1 ttl=50
>time=51.0 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=2 ttl=50
>time=49.9 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=3 ttl=50
>time=50.0 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=4 ttl=50
>time=50.2 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=5 ttl=50
>time=49.9 ms
>
>--- ftp.math.utah.edu ping statistics ---
>5 packets transmitted, 5 received, 0% packet loss, time 4006ms
>rtt min/avg/max/mdev = 49.901/50.178/50.968/0.405 ms
>
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl --head http://ftp.math.utah.edu
>HTTP/1.1 200 OK
>Date: Fri, 02 Apr 2021 12:28:08 GMT
>Server: Apache
>Accept-Ranges: bytes
>Content-Length: 4744
>Content-Type: text/html; charset=UTF-8
>
>
>
>Cheers, Henri
>
>On Fri, 2021-04-02 at 08:11 -0400, AC wrote:
>> It's NYC3, so New York City.
>>
>> And thanks!
>>
>> On April 2, 2021 8:00:45 AM EDT, Henri Menke via tex-live <
>> tex-live at tug.org> wrote:
>> > Which datacenter do you have your droplet in? I'll quickly spin up
>> > a
>> > VPS myself to check whether ftp.math.utah.edu is maybe blocking the
>> > entire DigitalOcean range of IPs (which is what Netflix does).
>> >
>> > Cheers, Henri
>> >
>> > On Fri, 2021-04-02 at 07:50 -0400, AC wrote:
>> > > Thanks for that suggestion (to both of you who've made it)!
>> > >
>> > > https://www.abuseipdb.com/
>> > >
>> > > says the IP in question has *not* been reported, so I'm good
>> > > there.
>> > >
>> > > https://www.ipvoid.com/ip-blacklist-check/
>> > >
>> > > and
>> > >
>> > > https://www.whatismyip.com/blacklist-check/
>> > >
>> > > lists that external IP as completely safe, meaning it's not on
>> > > any of
>> > > the blacklists they check (dozens, maybe over 100 in each case).
>> > >
>> > > On the other hand,
>> > >
>> > > https://whatismyip.live/blacklist-check
>> > >
>> > > finds it on some uribl.com lists, but that's not it either: my
>> > > home
>> > > address is on there too (for unfathomable reasons), and I can
>> > > ping
>> > > tug.ctan.org fine from there.
>> > >
>> > > In fact, trying out a bunch of these websites, my home external
>> > > IP
>> > > tends to be on more blacklists than the problematic one..
>> > >
>> > > On April 2, 2021 7:46:03 AM EDT, Henri Menke via tex-live <
>> > > tex-live at tug.org> wrote:
>> > > > Ah, you're on a DigitalOcean VPS. They are very popular among
>> > > > scammers,
>> > > > spammers, and for DDoS, so it's very likely that your IP is
>> > > > blocked
>> > > > pretty much everywhere. Check whether you appear in any of the
>> > > > common
>> > > > databases, e.g.
>> > > >
>> > > > https://www.abuseipdb.com
>> > > >
>> > > > Cheers, Henri
>> > > >
>> > > > On Fri, 2021-04-02 at 07:09 -0400, AC wrote:
>> > > > > Here are the results of an mtr ping:
>> > > > >
>> > > > > Start: 2021-04-02T03:33:06+0000
>> > > > > HOST:
>> > > > > gilead
>> > > > >
>> > > > >
>> > > > > Loss% Snt Last Avg Best Wrst StDev
>> > > > > 1.
>> > > > > AS??? ???
>> > > > >
>> > > > >
>> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
>> > > > > 2.
>> > > > > AS??? 10.74.132.77
>> > > > >
>> > > > >
>> > > > > 0.0% 100 0.5 0.9 0.4 29.9 3.0
>> > > > > 3.
>> > > > > AS??? 138.197.248.232
>> > > > >
>> > > > >
>> > > > > 0.0% 100 1.1 2.3 0.7 36.6 4.9
>> > > > > 4.
>> > > > > AS??? 138.197.248.12
>> > > > >
>> > > > >
>> > > > > 0.0% 100 0.6 1.8 0.3 61.5 7.4
>> > > > > 5.
>> > > > > AS??? 138.197.244.46
>> > > > >
>> > > > >
>> > > > > 0.0% 100 0.9 1.1 0.8 4.4 0.5
>> > > > > 6.
>> > > > > AS14061 162.243.191.247
>> > > > >
>> > > > >
>> > > > > 0.0% 100 0.9 1.5 0.9 36.5 3.7
>> > > > > 7. AS6461 ae18.cs1.lga5.us.zip.zayo.com
>> > > > > (64.125.27.178) 99.0% 100 48.4 48.4 48.
>> > > > > 4 4
>> > > > > 8.4
>> > > > > 0.0
>> > > > > 8. AS6461 ae3.cs3.ord2.us.eth.zayo.com
>> > > > > (64.125.29.209) 88.0% 100 50.9 49.1 48
>> > > > > .4
>> > > > > 50.9
>> > > > > 0.7
>> > > > > 9.
>> > > > > AS??? ???
>> > > > >
>> > > > >
>> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
>> > > > > 10. AS6461 ae11.mpr2.slc2.us.zip.zayo.com
>> > > > > (64.125.26.43) 0.0% 100 48.3 49.1 48.1
>> > > > > 75
>> > > > > .9
>> > > > > 3.5
>> > > > > 11. AS6461 ae4.mpr1.slc2.us.zip.zayo.com
>> > > > > (64.125.26.164) 0.0% 100 47.6 48.4 47.
>> > > > > 6 6
>> > > > > 5.2
>> > > > > 2.3
>> > > > > 12. AS6461 209.66.120.134.IPYX-246177-ZYO.zip.zayo.com
>> > > > > (209.66.120.134) 0.0% 100 48.3 49.1 48.2 65.4 3.1
>> > > > > 13.
>> > > > > AS210 140.197.253.110
>> > > > >
>> > > > >
>> > > > > 0.0% 100 49.5 49.6 49.4 50.1 0.1
>> > > > > 14.
>> > > > > AS210 140.197.252.76
>> > > > >
>> > > > >
>> > > > > 0.0% 100 49.7 49.6 49.3 50.1 0.1
>> > > > > 15.
>> > > > > AS210 140.197.252.84
>> > > > >
>> > > > >
>> > > > > 0.0% 100 50.9 49.7 49.3 52.0 0.5
>> > > > > 16.
>> > > > > AS210 140.197.253.139
>> > > > >
>> > > > >
>> > > > > 0.0% 100 49.4 49.3 49.2 50.1 0.1
>> > > > > 17.
>> > > > > AS17055 199.104.93.117
>> > > > >
>> > > > >
>> > > > > 0.0% 100 49.6 49.6 49.5 50.2 0.1
>> > > > > 18.
>> > > > > AS17055 199.104.93.102
>> > > > >
>> > > > >
>> > > > > 0.0% 100 50.1 50.7 50.0 63.7 1.9
>> > > > > 19.
>> > > > > AS17055 155.99.130.59
>> > > > >
>> > > > >
>> > > > > 0.0% 100 50.2 50.1 50.0 50.7 0.1
>> > > > > 20.
>> > > > > AS17055 155.99.130.14
>> > > > >
>> > > > >
>> > > > > 0.0% 100 50.4 50.4 49.9 62.9 1.7
>> > > > > 21.
>> > > > > AS??? ???
>> > > > >
>> > > > >
>> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
>> > > > >
>> > > > > ---
>> > > > >
>> > > > > I am certainly *not* on ip6, and my VPS admins advise as
>> > > > > follows:
>> > > > >
>> > > > > > Thank you for following up and sharing the mtr results. As
>> > > > > > per
>> > > > > > the
>> > > > > > mtr results, the destination domain "tug.ctan.org" is not
>> > > > > > reachable. As we are able to ping from other droplets, I
>> > > > > > suspect
>> > > > > > the issue is that your droplet's IP address is blocked at
>> > > > > > the
>> > > > > > destination.
>> > > > > >
>> > > > > > As the packets are moving out of DigitalOcean' network
>> > > > > > (AS14061)
>> > > > > > and traversing to the destination, this isn't an issue at
>> > > > > > the
>> > > > > > DigitalOcean managed network. You will need to contact the
>> > > > > > administrator of the domain "tug.ctan.org" and request them
>> > > > > > to
>> > > > > > check if the droplet's IP is blacklisted for some reason
>> > > > > > and
>> > > > > > request them to delist.
>> > > > > >
>> > > > >
>> > > > > This is what it looks like to me too: there's every
>> > > > > indication
>> > > > > that
>> > > > > tug.ctan.org is specifically blocking this IP. I simply do
>> > > > > not
>> > > > > see
>> > > > > how the issue could be at my end..
>> > > > >
>> > > > > Whom would I contact about that?
>> > > > >
>> > > > > I am not sure who controls tug.ctan.org, and whether someone
>> > > > > who
>> > > > > could un-blacklist me is reading this.
>> > > > >
>> > > > > On April 2, 2021 6:56:13 AM EDT, Zdenek Wagner <
>> > > > > zdenek.wagner at gmail.com> wrote:
>> > > > > > Hi all,
>> > > > > >
>> > > > > > I tried to ping tug.ctan.org without specifying the protcol
>> > > > > > and
>> > > > > > with
>> > > > > > IPv6 requested. This is my result:
>> > > > > >
>> > > > > > [zw at math-gnostics ~]$ ping -c5 tug.ctan.org
>> > > > > > PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of
>> > > > > > data.
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=1
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=2
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=3
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=4
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=5
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > >
>> > > > > > --- ftp.math.utah.edu ping statistics ---
>> > > > > > 5 packets transmitted, 5 received, 0% packet loss, time
>> > > > > > 4007ms
>> > > > > > rtt min/avg/max/mdev = 153.873/153.980/154.067/0.077 ms
>> > > > > > [zw at math-gnostics ~]$ ping -c5 -6 tug.ctan.org
>> > > > > > ping: tug.ctan.org: Address family for hostname not
>> > > > > > supported
>> > > > > >
>> > > > > > So the reason for timeout must be somewhere else, not in
>> > > > > > IPv6,
>> > > > > > the
>> > > > > > program would inform about it.
>> > > > > >
>> > > > > > Zdeněk Wagner
>> > > > > > http://ttsm.icpf.cas.cz/team/wagner.shtml
>> > > > > > http://icebearsoft.euweb.cz
>> > > > > >
>> > > > > > pá 2. 4. 2021 v 11:36 odesílatel Henri Menke via tex-live
>> > > > > > <tex-live at tug.org> napsal:
>> > > > > > > On 01/04/21, 23:17, AC wrote:
>> > > > > > > > Well, I know it's accessible, but the problem is
>> > > > > > > > specific
>> > > > > > > > to
>> > > > > > > > this
>> > > > > > pair of IPs.. I can ping
>> > > > > > > > - google.com just fine from that affected machine, and
>> > > > > > > > - tug.ctan.org from any other IPs I control (like my
>> > > > > > > > home
>> > > > > > computers).
>> > > > > > > > Could it be that the server is rejecting my connection
>> > > > > > > > (from
>> > > > > > > > that
>> > > > > > specific IP) due to some misconfiguration?
>> > > > > > > Could it be that you are on an IPv6 only network? The
>> > > > > > > domain
>> > > > > > > tug.ctan.org only returns an IPv4 address.
>> > > > > > >
>> > > > > > > Nevertheless, the problem is definitely on your side.
>> > > > > > >
>> > > > > > > Cheers, Henri
>> > > > > > >
>> > > > > > > > On April 1, 2021 11:02:54 PM EDT, Norbert Preining
>> > > > > > <norbert at preining.info> wrote:
>> > > > > > > > > On Thu, 01 Apr 2021, AC wrote:
>> > > > > > > > > > ping tug.ctan.org
>> > > > > > > > > > - time out on the affected machine, but
>> > > > > > > > >
>> > > > > > > > > Nothing we can help you there. If you have root
>> > > > > > > > > access,
>> > > > > > > > > you
>> > > > > > > > > can
>> > > > > > try
>> > > > > > > > > traceroute to see where it hangs. The server is
>> > > > > > > > > definitely
>> > > > > > accessible.
>> > > > > > > > > Best
>> > > > > > > > >
>> > > > > > > > > Norbert
>> > > > > > > > >
>> > > > > > > > > --
>> > > > > > > > > PREINING Norbert
>> > > > > > https://www.preining.info
>> > > > > > > > > Fujitsu + IFMGA Guide + TU Wien + TeX
>> > > > > > > > > Live +
>> > > > > > Debian Dev
>> > > > > > > > > GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0
>> > > > > > > > > 6CAC
>> > > > > > > > > A448
>> > > > > > > > > 860C
>> > > > > > DC13
More information about the tex-live
mailing list.