tug.ctan.org inaccessible on a specific machine
Henri Menke
henri at henrimenke.de
Fri Apr 2 14:30:01 CEST 2021
Hm, here everything seems to be fine.
root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl -sSfL ipinfo.io/ip | xargs
104.131.95.174
root at ubuntu-s-1vcpu-1gb-nyc3-01:~# ping -c 5 tug.ctan.org
PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of data.
64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=1 ttl=50 time=51.0 ms
64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=2 ttl=50 time=49.9 ms
64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=3 ttl=50 time=50.0 ms
64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=4 ttl=50 time=50.2 ms
64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=5 ttl=50 time=49.9 ms
--- ftp.math.utah.edu ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 49.901/50.178/50.968/0.405 ms
root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl --head http://ftp.math.utah.edu
HTTP/1.1 200 OK
Date: Fri, 02 Apr 2021 12:28:08 GMT
Server: Apache
Accept-Ranges: bytes
Content-Length: 4744
Content-Type: text/html; charset=UTF-8
Cheers, Henri
On Fri, 2021-04-02 at 08:11 -0400, AC wrote:
> It's NYC3, so New York City.
>
> And thanks!
>
> On April 2, 2021 8:00:45 AM EDT, Henri Menke via tex-live <
> tex-live at tug.org> wrote:
> > Which datacenter do you have your droplet in? I'll quickly spin up
> > a
> > VPS myself to check whether ftp.math.utah.edu is maybe blocking the
> > entire DigitalOcean range of IPs (which is what Netflix does).
> >
> > Cheers, Henri
> >
> > On Fri, 2021-04-02 at 07:50 -0400, AC wrote:
> > > Thanks for that suggestion (to both of you who've made it)!
> > >
> > > https://www.abuseipdb.com/
> > >
> > > says the IP in question has *not* been reported, so I'm good
> > > there.
> > >
> > > https://www.ipvoid.com/ip-blacklist-check/
> > >
> > > and
> > >
> > > https://www.whatismyip.com/blacklist-check/
> > >
> > > lists that external IP as completely safe, meaning it's not on
> > > any of
> > > the blacklists they check (dozens, maybe over 100 in each case).
> > >
> > > On the other hand,
> > >
> > > https://whatismyip.live/blacklist-check
> > >
> > > finds it on some uribl.com lists, but that's not it either: my
> > > home
> > > address is on there too (for unfathomable reasons), and I can
> > > ping
> > > tug.ctan.org fine from there.
> > >
> > > In fact, trying out a bunch of these websites, my home external
> > > IP
> > > tends to be on more blacklists than the problematic one..
> > >
> > > On April 2, 2021 7:46:03 AM EDT, Henri Menke via tex-live <
> > > tex-live at tug.org> wrote:
> > > > Ah, you're on a DigitalOcean VPS. They are very popular among
> > > > scammers,
> > > > spammers, and for DDoS, so it's very likely that your IP is
> > > > blocked
> > > > pretty much everywhere. Check whether you appear in any of the
> > > > common
> > > > databases, e.g.
> > > >
> > > > https://www.abuseipdb.com
> > > >
> > > > Cheers, Henri
> > > >
> > > > On Fri, 2021-04-02 at 07:09 -0400, AC wrote:
> > > > > Here are the results of an mtr ping:
> > > > >
> > > > > Start: 2021-04-02T03:33:06+0000
> > > > > HOST:
> > > > > gilead
> > > > >
> > > > >
> > > > > Loss% Snt Last Avg Best Wrst StDev
> > > > > 1.
> > > > > AS??? ???
> > > > >
> > > > >
> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
> > > > > 2.
> > > > > AS??? 10.74.132.77
> > > > >
> > > > >
> > > > > 0.0% 100 0.5 0.9 0.4 29.9 3.0
> > > > > 3.
> > > > > AS??? 138.197.248.232
> > > > >
> > > > >
> > > > > 0.0% 100 1.1 2.3 0.7 36.6 4.9
> > > > > 4.
> > > > > AS??? 138.197.248.12
> > > > >
> > > > >
> > > > > 0.0% 100 0.6 1.8 0.3 61.5 7.4
> > > > > 5.
> > > > > AS??? 138.197.244.46
> > > > >
> > > > >
> > > > > 0.0% 100 0.9 1.1 0.8 4.4 0.5
> > > > > 6.
> > > > > AS14061 162.243.191.247
> > > > >
> > > > >
> > > > > 0.0% 100 0.9 1.5 0.9 36.5 3.7
> > > > > 7. AS6461 ae18.cs1.lga5.us.zip.zayo.com
> > > > > (64.125.27.178) 99.0% 100 48.4 48.4 48.
> > > > > 4 4
> > > > > 8.4
> > > > > 0.0
> > > > > 8. AS6461 ae3.cs3.ord2.us.eth.zayo.com
> > > > > (64.125.29.209) 88.0% 100 50.9 49.1 48
> > > > > .4
> > > > > 50.9
> > > > > 0.7
> > > > > 9.
> > > > > AS??? ???
> > > > >
> > > > >
> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
> > > > > 10. AS6461 ae11.mpr2.slc2.us.zip.zayo.com
> > > > > (64.125.26.43) 0.0% 100 48.3 49.1 48.1
> > > > > 75
> > > > > .9
> > > > > 3.5
> > > > > 11. AS6461 ae4.mpr1.slc2.us.zip.zayo.com
> > > > > (64.125.26.164) 0.0% 100 47.6 48.4 47.
> > > > > 6 6
> > > > > 5.2
> > > > > 2.3
> > > > > 12. AS6461 209.66.120.134.IPYX-246177-ZYO.zip.zayo.com
> > > > > (209.66.120.134) 0.0% 100 48.3 49.1 48.2 65.4 3.1
> > > > > 13.
> > > > > AS210 140.197.253.110
> > > > >
> > > > >
> > > > > 0.0% 100 49.5 49.6 49.4 50.1 0.1
> > > > > 14.
> > > > > AS210 140.197.252.76
> > > > >
> > > > >
> > > > > 0.0% 100 49.7 49.6 49.3 50.1 0.1
> > > > > 15.
> > > > > AS210 140.197.252.84
> > > > >
> > > > >
> > > > > 0.0% 100 50.9 49.7 49.3 52.0 0.5
> > > > > 16.
> > > > > AS210 140.197.253.139
> > > > >
> > > > >
> > > > > 0.0% 100 49.4 49.3 49.2 50.1 0.1
> > > > > 17.
> > > > > AS17055 199.104.93.117
> > > > >
> > > > >
> > > > > 0.0% 100 49.6 49.6 49.5 50.2 0.1
> > > > > 18.
> > > > > AS17055 199.104.93.102
> > > > >
> > > > >
> > > > > 0.0% 100 50.1 50.7 50.0 63.7 1.9
> > > > > 19.
> > > > > AS17055 155.99.130.59
> > > > >
> > > > >
> > > > > 0.0% 100 50.2 50.1 50.0 50.7 0.1
> > > > > 20.
> > > > > AS17055 155.99.130.14
> > > > >
> > > > >
> > > > > 0.0% 100 50.4 50.4 49.9 62.9 1.7
> > > > > 21.
> > > > > AS??? ???
> > > > >
> > > > >
> > > > > 100.0 100 0.0 0.0 0.0 0.0 0.0
> > > > >
> > > > > ---
> > > > >
> > > > > I am certainly *not* on ip6, and my VPS admins advise as
> > > > > follows:
> > > > >
> > > > > > Thank you for following up and sharing the mtr results. As
> > > > > > per
> > > > > > the
> > > > > > mtr results, the destination domain "tug.ctan.org" is not
> > > > > > reachable. As we are able to ping from other droplets, I
> > > > > > suspect
> > > > > > the issue is that your droplet's IP address is blocked at
> > > > > > the
> > > > > > destination.
> > > > > >
> > > > > > As the packets are moving out of DigitalOcean' network
> > > > > > (AS14061)
> > > > > > and traversing to the destination, this isn't an issue at
> > > > > > the
> > > > > > DigitalOcean managed network. You will need to contact the
> > > > > > administrator of the domain "tug.ctan.org" and request them
> > > > > > to
> > > > > > check if the droplet's IP is blacklisted for some reason
> > > > > > and
> > > > > > request them to delist.
> > > > > >
> > > > >
> > > > > This is what it looks like to me too: there's every
> > > > > indication
> > > > > that
> > > > > tug.ctan.org is specifically blocking this IP. I simply do
> > > > > not
> > > > > see
> > > > > how the issue could be at my end..
> > > > >
> > > > > Whom would I contact about that?
> > > > >
> > > > > I am not sure who controls tug.ctan.org, and whether someone
> > > > > who
> > > > > could un-blacklist me is reading this.
> > > > >
> > > > > On April 2, 2021 6:56:13 AM EDT, Zdenek Wagner <
> > > > > zdenek.wagner at gmail.com> wrote:
> > > > > > Hi all,
> > > > > >
> > > > > > I tried to ping tug.ctan.org without specifying the protcol
> > > > > > and
> > > > > > with
> > > > > > IPv6 requested. This is my result:
> > > > > >
> > > > > > [zw at math-gnostics ~]$ ping -c5 tug.ctan.org
> > > > > > PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of
> > > > > > data.
> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
> > > > > > icmp_seq=1
> > > > > > ttl=33
> > > > > > time=154 ms
> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
> > > > > > icmp_seq=2
> > > > > > ttl=33
> > > > > > time=154 ms
> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
> > > > > > icmp_seq=3
> > > > > > ttl=33
> > > > > > time=154 ms
> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
> > > > > > icmp_seq=4
> > > > > > ttl=33
> > > > > > time=154 ms
> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
> > > > > > icmp_seq=5
> > > > > > ttl=33
> > > > > > time=154 ms
> > > > > >
> > > > > > --- ftp.math.utah.edu ping statistics ---
> > > > > > 5 packets transmitted, 5 received, 0% packet loss, time
> > > > > > 4007ms
> > > > > > rtt min/avg/max/mdev = 153.873/153.980/154.067/0.077 ms
> > > > > > [zw at math-gnostics ~]$ ping -c5 -6 tug.ctan.org
> > > > > > ping: tug.ctan.org: Address family for hostname not
> > > > > > supported
> > > > > >
> > > > > > So the reason for timeout must be somewhere else, not in
> > > > > > IPv6,
> > > > > > the
> > > > > > program would inform about it.
> > > > > >
> > > > > > Zdeněk Wagner
> > > > > > http://ttsm.icpf.cas.cz/team/wagner.shtml
> > > > > > http://icebearsoft.euweb.cz
> > > > > >
> > > > > > pá 2. 4. 2021 v 11:36 odesílatel Henri Menke via tex-live
> > > > > > <tex-live at tug.org> napsal:
> > > > > > > On 01/04/21, 23:17, AC wrote:
> > > > > > > > Well, I know it's accessible, but the problem is
> > > > > > > > specific
> > > > > > > > to
> > > > > > > > this
> > > > > > pair of IPs.. I can ping
> > > > > > > > - google.com just fine from that affected machine, and
> > > > > > > > - tug.ctan.org from any other IPs I control (like my
> > > > > > > > home
> > > > > > computers).
> > > > > > > > Could it be that the server is rejecting my connection
> > > > > > > > (from
> > > > > > > > that
> > > > > > specific IP) due to some misconfiguration?
> > > > > > > Could it be that you are on an IPv6 only network? The
> > > > > > > domain
> > > > > > > tug.ctan.org only returns an IPv4 address.
> > > > > > >
> > > > > > > Nevertheless, the problem is definitely on your side.
> > > > > > >
> > > > > > > Cheers, Henri
> > > > > > >
> > > > > > > > On April 1, 2021 11:02:54 PM EDT, Norbert Preining
> > > > > > <norbert at preining.info> wrote:
> > > > > > > > > On Thu, 01 Apr 2021, AC wrote:
> > > > > > > > > > ping tug.ctan.org
> > > > > > > > > > - time out on the affected machine, but
> > > > > > > > >
> > > > > > > > > Nothing we can help you there. If you have root
> > > > > > > > > access,
> > > > > > > > > you
> > > > > > > > > can
> > > > > > try
> > > > > > > > > traceroute to see where it hangs. The server is
> > > > > > > > > definitely
> > > > > > accessible.
> > > > > > > > > Best
> > > > > > > > >
> > > > > > > > > Norbert
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > PREINING Norbert
> > > > > > https://www.preining.info
> > > > > > > > > Fujitsu + IFMGA Guide + TU Wien + TeX
> > > > > > > > > Live +
> > > > > > Debian Dev
> > > > > > > > > GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0
> > > > > > > > > 6CAC
> > > > > > > > > A448
> > > > > > > > > 860C
> > > > > > DC13
More information about the tex-live
mailing list.