tug.ctan.org inaccessible on a specific machine

AC achirvasub at gmail.com
Fri Apr 2 14:35:19 CEST 2021


Thank you.

I am still blocked, but this at least makes me hopeful spinning up a snapshot of this droplet with a different IP will get me access again.

Still baffling though..

On April 2, 2021 8:30:01 AM EDT, Henri Menke via tex-live <tex-live at tug.org> wrote:
>Hm, here everything seems to be fine.
>
>
>
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl -sSfL ipinfo.io/ip | xargs
>104.131.95.174
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# ping -c 5 tug.ctan.org
>PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of data.
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=1 ttl=50
>time=51.0 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=2 ttl=50
>time=49.9 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=3 ttl=50
>time=50.0 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=4 ttl=50
>time=50.2 ms
>64 bytes from ftp.math.utah.edu (155.101.98.136): icmp_seq=5 ttl=50
>time=49.9 ms
>
>--- ftp.math.utah.edu ping statistics ---
>5 packets transmitted, 5 received, 0% packet loss, time 4006ms
>rtt min/avg/max/mdev = 49.901/50.178/50.968/0.405 ms
>
>root at ubuntu-s-1vcpu-1gb-nyc3-01:~# curl --head http://ftp.math.utah.edu
>HTTP/1.1 200 OK
>Date: Fri, 02 Apr 2021 12:28:08 GMT
>Server: Apache
>Accept-Ranges: bytes
>Content-Length: 4744
>Content-Type: text/html; charset=UTF-8
>
>
>
>Cheers, Henri
>
>On Fri, 2021-04-02 at 08:11 -0400, AC wrote:
>> It's NYC3, so New York City.
>> 
>> And thanks!
>> 
>> On April 2, 2021 8:00:45 AM EDT, Henri Menke via tex-live <
>> tex-live at tug.org> wrote:
>> > Which datacenter do you have your droplet in? I'll quickly spin up
>> > a
>> > VPS myself to check whether ftp.math.utah.edu is maybe blocking the
>> > entire DigitalOcean range of IPs (which is what Netflix does).
>> > 
>> > Cheers, Henri
>> > 
>> > On Fri, 2021-04-02 at 07:50 -0400, AC wrote:
>> > > Thanks for that suggestion (to both of you who've made it)!
>> > > 
>> > > https://www.abuseipdb.com/
>> > > 
>> > > says the IP in question has *not* been reported, so I'm good
>> > > there.
>> > > 
>> > > https://www.ipvoid.com/ip-blacklist-check/
>> > > 
>> > > and
>> > > 
>> > > https://www.whatismyip.com/blacklist-check/
>> > > 
>> > > lists that external IP as completely safe, meaning it's not on
>> > > any of
>> > > the blacklists they check (dozens, maybe over 100 in each case).
>> > > 
>> > > On the other hand,
>> > > 
>> > > https://whatismyip.live/blacklist-check
>> > > 
>> > > finds it on some uribl.com lists, but that's not it either: my
>> > > home
>> > > address is on there too (for unfathomable reasons), and I can
>> > > ping
>> > > tug.ctan.org fine from there.
>> > > 
>> > > In fact, trying out a bunch of these websites, my home external
>> > > IP
>> > > tends to be on more blacklists than the problematic one..
>> > > 
>> > > On April 2, 2021 7:46:03 AM EDT, Henri Menke via tex-live <
>> > > tex-live at tug.org> wrote:
>> > > > Ah, you're on a DigitalOcean VPS. They are very popular among
>> > > > scammers,
>> > > > spammers, and for DDoS, so it's very likely that your IP is
>> > > > blocked
>> > > > pretty much everywhere. Check whether you appear in any of the
>> > > > common
>> > > > databases, e.g.
>> > > > 
>> > > > https://www.abuseipdb.com
>> > > > 
>> > > > Cheers, Henri
>> > > > 
>> > > > On Fri, 2021-04-02 at 07:09 -0400, AC wrote:
>> > > > > Here are the results of an mtr ping:
>> > > > > 
>> > > > > Start: 2021-04-02T03:33:06+0000
>> > > > > HOST:
>> > > > > gilead                                                       
>> > > > >     
>> > > > >     
>> > > > >  Loss%   Snt   Last   Avg  Best  Wrst StDev
>> > > > >   1.
>> > > > > AS???    ???                                                 
>> > > > >     
>> > > > >     
>> > > > >   100.0   100    0.0   0.0   0.0   0.0   0.0
>> > > > >   2.
>> > > > > AS???    10.74.132.77                                        
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100    0.5   0.9   0.4  29.9   3.0
>> > > > >   3.
>> > > > > AS???    138.197.248.232                                     
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100    1.1   2.3   0.7  36.6   4.9
>> > > > >   4.
>> > > > > AS???    138.197.248.12                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100    0.6   1.8   0.3  61.5   7.4
>> > > > >   5.
>> > > > > AS???    138.197.244.46                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100    0.9   1.1   0.8   4.4   0.5
>> > > > >   6.
>> > > > > AS14061  162.243.191.247                                     
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100    0.9   1.5   0.9  36.5   3.7
>> > > > >   7. AS6461   ae18.cs1.lga5.us.zip.zayo.com
>> > > > > (64.125.27.178)                 99.0%   100   48.4  48.4  48.
>> > > > > 4  4
>> > > > > 8.4 
>> > > > >   0.0
>> > > > >   8. AS6461   ae3.cs3.ord2.us.eth.zayo.com
>> > > > > (64.125.29.209)                  88.0%   100   50.9  49.1  48
>> > > > > .4  
>> > > > > 50.9
>> > > > >    0.7
>> > > > >   9.
>> > > > > AS???    ???                                                 
>> > > > >     
>> > > > >     
>> > > > >   100.0   100    0.0   0.0   0.0   0.0   0.0
>> > > > >  10. AS6461   ae11.mpr2.slc2.us.zip.zayo.com
>> > > > > (64.125.26.43)                  0.0%   100   48.3  49.1  48.1
>> > > > >   75
>> > > > > .9  
>> > > > >  3.5
>> > > > >  11. AS6461   ae4.mpr1.slc2.us.zip.zayo.com
>> > > > > (64.125.26.164)                  0.0%   100   47.6  48.4  47.
>> > > > > 6  6
>> > > > > 5.2 
>> > > > >   2.3
>> > > > >  12. AS6461   209.66.120.134.IPYX-246177-ZYO.zip.zayo.com
>> > > > > (209.66.120.134)   0.0%   100   48.3  49.1  48.2  65.4   3.1
>> > > > >  13.
>> > > > > AS210    140.197.253.110                                     
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   49.5  49.6  49.4  50.1   0.1
>> > > > >  14.
>> > > > > AS210    140.197.252.76                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   49.7  49.6  49.3  50.1   0.1
>> > > > >  15.
>> > > > > AS210    140.197.252.84                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   50.9  49.7  49.3  52.0   0.5
>> > > > >  16.
>> > > > > AS210    140.197.253.139                                     
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   49.4  49.3  49.2  50.1   0.1
>> > > > >  17.
>> > > > > AS17055  199.104.93.117                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   49.6  49.6  49.5  50.2   0.1
>> > > > >  18.
>> > > > > AS17055  199.104.93.102                                      
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   50.1  50.7  50.0  63.7   1.9
>> > > > >  19.
>> > > > > AS17055  155.99.130.59                                       
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   50.2  50.1  50.0  50.7   0.1
>> > > > >  20.
>> > > > > AS17055  155.99.130.14                                       
>> > > > >     
>> > > > >     
>> > > > >    0.0%   100   50.4  50.4  49.9  62.9   1.7
>> > > > >  21.
>> > > > > AS???    ???                                                 
>> > > > >     
>> > > > >     
>> > > > >   100.0   100    0.0   0.0   0.0   0.0   0.0
>> > > > > 
>> > > > > ---
>> > > > > 
>> > > > > I am certainly *not* on ip6, and my VPS admins advise as
>> > > > > follows:
>> > > > > 
>> > > > > > Thank you for following up and sharing the mtr results. As
>> > > > > > per
>> > > > > > the
>> > > > > > mtr results, the destination domain "tug.ctan.org" is not
>> > > > > > reachable. As we are able to ping from other droplets, I
>> > > > > > suspect
>> > > > > > the issue is that your droplet's IP address is blocked at
>> > > > > > the
>> > > > > > destination.
>> > > > > > 
>> > > > > > As the packets are moving out of DigitalOcean' network
>> > > > > > (AS14061)
>> > > > > > and traversing to the destination, this isn't an issue at
>> > > > > > the
>> > > > > > DigitalOcean managed network. You will need to contact the
>> > > > > > administrator of the domain "tug.ctan.org" and request them
>> > > > > > to
>> > > > > > check if the droplet's IP is blacklisted for some reason
>> > > > > > and
>> > > > > > request them to delist.
>> > > > > > 
>> > > > > 
>> > > > > This is what it looks like to me too: there's every
>> > > > > indication
>> > > > > that
>> > > > > tug.ctan.org is specifically blocking this IP. I simply do
>> > > > > not
>> > > > > see
>> > > > > how the issue could be at my end..
>> > > > > 
>> > > > > Whom would I contact about that? 
>> > > > > 
>> > > > > I am not sure who controls tug.ctan.org, and whether someone
>> > > > > who
>> > > > > could un-blacklist me is reading this.
>> > > > > 
>> > > > > On April 2, 2021 6:56:13 AM EDT, Zdenek Wagner <
>> > > > > zdenek.wagner at gmail.com> wrote:
>> > > > > > Hi all,
>> > > > > > 
>> > > > > > I tried to ping tug.ctan.org without specifying the protcol
>> > > > > > and
>> > > > > > with
>> > > > > > IPv6 requested. This is my result:
>> > > > > > 
>> > > > > > [zw at math-gnostics ~]$ ping -c5 tug.ctan.org
>> > > > > > PING ftp.math.utah.edu (155.101.98.136) 56(84) bytes of
>> > > > > > data.
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=1
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=2
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=3
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=4
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 64 bytes from ftp.math.utah.edu (155.101.98.136):
>> > > > > > icmp_seq=5
>> > > > > > ttl=33
>> > > > > > time=154 ms
>> > > > > > 
>> > > > > > --- ftp.math.utah.edu ping statistics ---
>> > > > > > 5 packets transmitted, 5 received, 0% packet loss, time
>> > > > > > 4007ms
>> > > > > > rtt min/avg/max/mdev = 153.873/153.980/154.067/0.077 ms
>> > > > > > [zw at math-gnostics ~]$ ping -c5 -6 tug.ctan.org
>> > > > > > ping: tug.ctan.org: Address family for hostname not
>> > > > > > supported
>> > > > > > 
>> > > > > > So the reason for timeout must be somewhere else, not in
>> > > > > > IPv6,
>> > > > > > the
>> > > > > > program would inform about it.
>> > > > > > 
>> > > > > > Zdeněk Wagner
>> > > > > > http://ttsm.icpf.cas.cz/team/wagner.shtml
>> > > > > > http://icebearsoft.euweb.cz
>> > > > > > 
>> > > > > > pá 2. 4. 2021 v 11:36 odesílatel Henri Menke via tex-live
>> > > > > > <tex-live at tug.org> napsal:
>> > > > > > > On 01/04/21, 23:17, AC wrote:
>> > > > > > > > Well, I know it's accessible, but the problem is
>> > > > > > > > specific
>> > > > > > > > to
>> > > > > > > > this
>> > > > > > pair of IPs.. I can ping
>> > > > > > > > - google.com just fine from that affected machine, and
>> > > > > > > > - tug.ctan.org from any other IPs I control (like my
>> > > > > > > > home
>> > > > > > computers).
>> > > > > > > > Could it be that the server is rejecting my connection
>> > > > > > > > (from
>> > > > > > > > that
>> > > > > > specific IP) due to some misconfiguration?
>> > > > > > > Could it be that you are on an IPv6 only network? The
>> > > > > > > domain
>> > > > > > > tug.ctan.org only returns an IPv4 address.
>> > > > > > > 
>> > > > > > > Nevertheless, the problem is definitely on your side.
>> > > > > > > 
>> > > > > > > Cheers, Henri
>> > > > > > > 
>> > > > > > > > On April 1, 2021 11:02:54 PM EDT, Norbert Preining
>> > > > > > <norbert at preining.info> wrote:
>> > > > > > > > > On Thu, 01 Apr 2021, AC wrote:
>> > > > > > > > > > ping tug.ctan.org
>> > > > > > > > > > - time out on the affected machine, but
>> > > > > > > > > 
>> > > > > > > > > Nothing we can help you there. If you have root
>> > > > > > > > > access,
>> > > > > > > > > you
>> > > > > > > > > can
>> > > > > > try
>> > > > > > > > > traceroute to see where it hangs. The server is
>> > > > > > > > > definitely
>> > > > > > accessible.
>> > > > > > > > > Best
>> > > > > > > > > 
>> > > > > > > > > Norbert
>> > > > > > > > > 
>> > > > > > > > > --
>> > > > > > > > > PREINING Norbert                             
>> > > > > > https://www.preining.info
>> > > > > > > > > Fujitsu                 + IFMGA Guide + TU Wien + TeX
>> > > > > > > > > Live +
>> > > > > > Debian Dev
>> > > > > > > > > GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0
>> > > > > > > > > 6CAC
>> > > > > > > > > A448
>> > > > > > > > > 860C
>> > > > > > DC13



More information about the tex-live mailing list.