Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 298412

Summary: gentoo.snt.utwente.nl is denied access to albatross.gentoo.org on IP level: connection timeout
Product: Mirrors Reporter: Roel Baardman <roel>
Component: Server ProblemAssignee: Mirror Admins <mirror-admin>
Status: RESOLVED INVALID    
Severity: major    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://ftp.snt.utwente.nl/pub/os/linux/gentoo/
Whiteboard:
Package list:
Runtime testing required: ---

Description Roel Baardman 2009-12-26 10:08:42 UTC
gentoo.snt.utwente.nl is denied access to albatross.gentoo.org on IP level: it receives a connection timeout. Trying to connect from my home machine (cumulus-humilis.net), gives me a working TCP connection but denies me access on ACL level.

Reproducible: Always

Steps to Reproduce:
rsync from gentoo.snt.utwente.nl using albatross.gentoo.org



Expected Results:  
A working connection and working rsync

Yesterday I was blocked based on ACL, which was resolved after I filed a bug.
Perhaps I am blocked using the firewall now?
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-12-26 17:08:03 UTC
Nothing changed for you here since I re-added you to the ACL in bug 298354. You are trying to connect from 130.89.149.23, right?

Can you post a traceroute?
Comment 2 Roel Baardman 2009-12-26 17:34:45 UTC
Below is the traceroute.
However, I hear there is a lot of packet loss at the first hop. With lots of reroutes. I guess there is an invalid route somewhere or so.
First the packet loss was unconfirmed, hence I figured a misconfiguration at your side. Sorry to waste your time with this :-)

traceroute to albatross.gentoo.org (89.16.167.138), 30 hops max, 40 byte packets
 1  cr-snt.routing.utwente.nl (130.89.149.4)  0.390 ms  0.407 ms  0.504 ms
 2  * * *
 3  GE1-3-0.2037.JNR01.Asd002A.surf.net (145.145.4.5)  4.869 ms  4.876 ms  4.868 ms
 4  * AE1.500.JNR02.Asd001A.surf.net (145.145.80.73)  4.593 ms  4.798 ms
 5  Vlan951.icore1.AD1-Amsterdam.as6453.net (195.219.150.69)  10.007 ms  10.008 ms  10.000 ms
 6  Vlan1685.icore1.LDN-London.as6453.net (195.219.150.74)  25.985 ms  23.751 ms  23.657 ms
 7  Vlan501.icore1.LDN-London.as6453.net (195.219.83.18)  19.180 ms  19.288 ms  19.269 ms
 8  gi4-10.cr02.man.bytemark.co.uk (80.68.80.74)  26.584 ms  26.579 ms  26.572 ms
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
Comment 3 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-12-26 17:49:59 UTC
no worries, it is good to see that your site is still active and involved here. Far too often, we get mirror sites that drop off without communication.