[server-admins] Fwd: Re: routes

Manfred Bergmann bergmannmd at web.de
Thu May 13 12:57:41 MST 2010


I believe he didn't read your mail.
It seems they can't or won't let all traffic though?


Manfred

Am 13.05.2010 um 19:57 schrieb Troy A. Griffitts:

> OK guys.  Here's the updated history of this conversation between me and our ISP.  What do you guys think?
> 
> 
> 
> -------- Original Message --------
> Subject:	Re: [server-admins] routes
> Date:	Tue, 11 May 2010 15:30:24 -0700 (MST)
> From:	Extreme Internet Support <support at extremezone.com>
> To:	Troy A. Griffitts <scribe at crosswire.org>
> 
> Its not that we are denying them to your server only or have special
> rules. These are IPs that were hacking us/spamming us/etc.... I have 8
> pages of "ip route 46.1.0.0 0.0.0.255 null0".
> 
> All I need are countries, so I can sort through this list.
> Again, I have this to work with:
> ip route 150.135.40.100 255.255.255.255 null0
> ip route 77.238.198.226 255.255.255.255 null0
> ip route 189.12.9.210 255.255.255.255 null0
> ip route 201.51.105.104 255.255.255.255 null0
> ip route 201.76.39.214 255.255.255.255 null0
> ip route 201.89.130.151 255.255.255.255 null0
> ip route 187.79.18.31 255.255.255.255 null0
> ip route 200.103.31.194 255.255.255.255 null0
> ip route 200.90.248.251 255.255.255.255 null0
> ip route 123.112.81.40 255.255.255.255 null0
> ip route 222.170.178.191 255.255.255.255 null0
> ip route 186.98.181.6 255.255.255.255 null0
> ip route 190.125.197.198 255.255.255.255 null0
> ip route 190.71.255.81 255.255.255.255 null0
> ip route 190.3.212.189 255.255.255.255 null0
> ip route 201.232.18.46 255.255.255.255 null0
> ip route 84.42.172.186 255.255.255.255 null0
> ip route 190.80.235.171 255.255.255.255 null0
> ip route 186.120.51.125 255.255.255.255 null0
> ip route 190.167.5.7 255.255.255.255 null0
> ip route 190.167.92.111 255.255.255.255 null0
> ip route 190.80.202.85 255.255.255.255 null0
> ip route 190.166.51.36 255.255.255.255 null0
> ip route 200.88.97.158 255.255.255.255 null0
> ip route 78.46.79.178 255.255.255.255 null0
> ip route 190.149.60.210 255.255.255.255 null0
> ip route 200.13.177.251 255.255.255.255 null0
> ip route 59.92.105.59 255.255.255.255 null0
> ip route 78.38.120.250 255.255.255.255 null0
> ip route 93.91.206.181 255.255.255.255 null0
> 
> and this goes on and on and on and on for 8 more pages. I have _no way_ of
> knowing which of these are causing you problems. I _can_ however, add all
> 8 pages of IPs to a text file then reverse each IP so I can see the
> IP/coutnry its coming from. I can then match them up to the troubled 
> countries and find out _where_ its being blocked exactly.
> 
> Id rather not have to blindly remove all of those. You said you had 
> complaints from all over the world, you must have some country names to 
> work with or you wouldnt know its "all over the world".
> 
> I cant unblock "everything to your server" because these are being stopped 
> from coming into our _entire_ network. If you want, I can jsut randomly 
> rmeove IPs but I dont think that will help you at all.
> 
> At least give me some idea of _what_ I need to unblock.
> 
> At best right now, without any feedback from you as to who or what is 
> being blocked, I can go through and look for any subnets that are being 
> blocked.
> 
> Also, Lee Burton is no longer with us. He was let go last year in Jan.
> 
> Thank you for writing us here at Extreme Internet Technical Support, and
> please let us know if we may be of assistance to you in the future by
> contacting us at the different options listed below...
> 
> We want to hear from you!
> 
> Extreme Support
>                                           \\  - -  //
>                                            (  0 0  )
> -----------------------------------------oOOo-(_)-oOOo----------
>   Extreme Internet                            / \
>   Technical Support
>   8655 East Via de Ventura G-181               o
>   Scottsdale, Arizona 85258-3321               o
>   Phone : (480) 368-4638  Opt #1               o
>   Fax   : (480) 368-4637
>   E-mail: 
> support at extremezone.com
> 
>   Web   : 
> www.extremezone.com
> 
> 
>   Technical Support Hours:
>   Monday-Friday 9:00am to 5:30pm
>   Sat-Sun/Holidays 10:00am to 6:00pm
>  --------------------------------------------------Ooo-----------
>                                           ooO    (   )
>                                          (   )    ) /
>                                           \ (    (_/
>                                            \_)
> 
> On Sat, 8 May 2010, Troy A. Griffitts wrote:
> 
> > Not to be a jerk or anything-- you guys have been wonderful to us for
> > the number of years we've housed our server at Extreme Internet, but we
> > are an international organization.  It's not a straightforward task to
> > respond to your request for us to supply countries and IP addresses for
> > you to unblock.  We supply software for 100s of languages used in remote
> > parts of the world-- some of which are home to less than savory people.
> >
> > We don't want to wait for a creative person from each of these blocked
> > countries to find our public IRC channel and report that they can no
> > longer access our tools, and then send their IP address to you to unblock.
> >
> > We can manage our own security on CrossWire.  Please do not block
> > traffic to our server.
> >
> > Thank you,
> >
> > Troy A. Griffitts
> >
> >
> >
> > Extreme Internet Support wrote:
> >> Can you give me country domains from these people complaining? All I've
> >> got are tens of pages worth of IP address on our EDGE router and I have
> >> no idea which ones you'd like to be removed but I can't remoeve all of
> >> them because some of these are here for good reason.
> >>
> >> If I get a list of domains or countries, I can start resolving these IP
> >> address' hundreds at a time and match them up for you.
> >>
> >> Thank you for writing us here at Extreme Internet Technical Support, and
> >> please let us know if we may be of assistance to you in the future by
> >> contacting us at the different options listed below...
> >>
> >> We want to hear from you!
> >>
> >> Extreme Support
> >>                                           \\  - -  //
> >>                                            (  0 0  )
> >> -----------------------------------------oOOo-(_)-oOOo----------
> >>   Extreme Internet                            / \
> >>   Technical Support
> >>   8655 East Via de Ventura G-181               o
> >>   Scottsdale, Arizona 85258-3321               o
> >>   Phone : (480) 368-4638  Opt #1               o
> >>   Fax   : (480) 368-4637
> >>   E-mail: 
> support at extremezone.com
> 
> >>   Web   : 
> www.extremezone.com
> 
> >>
> >>   Technical Support Hours:
> >>   Monday-Friday 9:00am to 5:30pm
> >>   Sat-Sun/Holidays 10:00am to 6:00pm
> >>  --------------------------------------------------Ooo-----------
> >>                                           ooO    (   )
> >>                                          (   )    ) /
> >>                                           \ (    (_/
> >>                                            \_)
> >>
> >> On Sat, 1 May 2010, Troy A. Griffitts wrote:
> >>
> >>> Dear Extremezone Support,
> >>>
> >>> We are still receiving complaints from populations all over the world
> >>> who are blocked from our server.
> >>>
> >>> Could you please unblock all IP addresses from our server.
> >>>
> >>> Thank you,
> >>>
> >>> Troy A. Griffitts
> >>>
> >>>
> >>>
> >>> Troy A. Griffitts wrote on 04/26/2010 05:25 PM:
> >>>> Could you please confirm that there are no longer any blocks banned from
> >>>> accessing our server?
> >>>>
> >>>>
> >>>>
> >>>>
> >>>> Extreme Internet Support wrote:
> >>>>> We were having issues with, for the most part, with ALL of Africa. I
> >>>>> banned several netblocks to prevent them from their continued
> >>>>> hacking/spamming attacks.
> >>>>>
> >>>>> I removed the one for .zw and now those should resolve.
> >>>>>
> >>>>> Thank you for writing us here at Extreme Internet Technical Support,
> >>>>> and
> >>>>> please let us know if we may be of assistance to you in the future by
> >>>>> contacting us at the different options listed below...
> >>>>>
> >>>>> We want to hear from you!
> >>>>>
> >>>>> Extreme Support
> >>>>>                                           \\  - -  //
> >>>>>                                            (  0 0  )
> >>>>> -----------------------------------------oOOo-(_)-oOOo----------
> >>>>>   Extreme Internet                            / \
> >>>>>   Technical Support
> >>>>>   8655 East Via de Ventura G-181               o
> >>>>>   Scottsdale, Arizona 85258-3321               o
> >>>>>   Phone : (480) 368-4638  Opt #1               o
> >>>>>   Fax   : (480) 368-4637
> >>>>>   E-mail: 
> support at extremezone.com
> 
> >>>>>   Web   : 
> www.extremezone.com
> 
> >>>>>
> >>>>>   Technical Support Hours:
> >>>>>   Monday-Friday 9:00am to 5:30pm
> >>>>>   Sat-Sun/Holidays 10:00am to 6:00pm
> >>>>>  --------------------------------------------------Ooo-----------
> >>>>>                                           ooO    (   )
> >>>>>                                          (   )    ) /
> >>>>>                                           \ (    (_/
> >>>>>                                            \_)
> >>>>>
> >>>>> On Mon, 26 Apr 2010, Troy A. Griffitts wrote:
> >>>>>
> >>>>>> Dear Support at Extreme Internet,
> >>>>>>
> >>>>>> Within the past few weeks CrossWire.org has seen routing problems from
> >>>>>> various parts of the world.  We've had problems reported from Mexico,
> >>>>>> Brazil, and Africa / Zimbabwe among others.  Below is a traceroute
> >>>>>> from
> >>>>>> our server to IPs which are reporting problems, and one from the IP to
> >>>>>> our server.  Any help would be appreciated.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> Traceroute away from crosswire.org toward any of the addresses in
> >>>>>> question dies, not on crosswire.org itself, but 2 hops away:
> >>>>>>
> >>>>>> [charcoal at www ~]$ traceroute 196.215.26.11
> >>>>>> traceroute to 196.215.26.11 (196.215.26.11), 30 hops max, 60 byte
> >>>>>> packets
> >>>>>> 1  ip-140-154-249.phx.extremezone.com (64.140.154.249)  2.332 ms
> >>>>>> 2.748
> >>>>>> ms  3.204 ms
> >>>>>> 2  fe1-0-0.phx.extremezone.com (208.129.255.1)  1.432 ms  1.426 ms
> >>>>>> 1.382 ms
> >>>>>> 3  * * *
> >>>>>> 4  * * *
> >>>>>> 5  * * *
> >>>>>>
> >>>>>> -------------------------------------------------------------------------------
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> [scribe at www ~]$ traceroute 196.201.23.53
> >>>>>> traceroute to 196.201.23.53 (196.201.23.53), 30 hops max, 60 byte
> >>>>>> packets
> >>>>>> 1  ip-140-154-249.phx.extremezone.com (64.140.154.249)  1.638 ms
> >>>>>> 2.048
> >>>>>> ms  2.529 ms
> >>>>>> 2  fe1-0-0.phx.extremezone.com (208.129.255.1)  1.536 ms  1.521 ms
> >>>>>> 1.497 ms
> >>>>>> 3  * * *
> >>>>>> 4  * * *
> >>>>>> 5  * * *
> >>>>>>
> >>>>>> -------------------------------------------------------------------------------
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> teus at 2530p:~$ tracepath 
> www.crosswire.org
> 
> >>>>>> 1:  2530p.local (192.168.0.1)                              0.271ms
> >>>>>> pmtu
> >>>>>> 1500
> >>>>>> 1:  192.168.0.8 (192.168.0.8)                              5.689ms
> >>>>>> 1:  192.168.0.8 (192.168.0.8)                              2.449ms
> >>>>>> 2:  10.2.4.1 (10.2.4.1)                                   14.829ms
> >>>>>> 3:  192.168.221.2 (192.168.221.2)                         48.459ms
> >>>>>> 4:  transmedia-byo-transit-gateway.zol.co.zw (196.201.23.53) 140.769ms
> >>>>>> 5:  transit-mercury-bulgaria.zol.co.zw (196.201.1.181)   145.678ms
> >>>>>> 6:  earth.zol.co.zw (196.201.1.113)                       96.517ms
> >>>>>> 7:  pt-btc.zol.co.zw (196.201.1.234)                      94.104ms
> >>>>>> 8:  41.78.76.145 (41.78.76.145)                          190.166ms
> >>>>>> 9:  168.167.255.69 (168.167.255.69)                       92.135ms
> >>>>>> 10:  bw-gbe-msu1-pr2.btc.net.bw (168.167.253.12)           87.636ms
> >>>>>> 11:  168.167.255.73 (168.167.255.73)                      448.305ms
> >>>>>> 12:  166.49.170.45 (166.49.170.45)                        383.748ms
> >>>>>> asymm 20
> >>>>>> 13:  166-49-135-229.eu.bt.net (166.49.135.229)            401.982ms
> >>>>>> asymm 19
> >>>>>> 14:  t2c1-p9-2.uk-eal.eu.bt.net (166.49.195.202)          523.328ms
> >>>>>> asymm 19
> >>>>>> 15:  t2c1-p5-0-0.us-ash.eu.bt.net (166.49.164.65)         521.726ms
> >>>>>> asymm 20
> >>>>>> 16:  166-49-151-134.eu.bt.net (166.49.151.134)            443.469ms
> >>>>>> asymm 19
> >>>>>> 17:  phx-core-02.inet.qwest.net (67.14.32.162)            477.319ms
> >>>>>> asymm 22
> >>>>>> 18:  phx-edge-10.inet.qwest.net (205.171.129.38)          491.561ms
> >>>>>> asymm 22
> >>>>>> 19:  no reply
> >>>>>> 20:  no reply
> >>>>>> 21:  no reply
> >>>>>> 22:  no reply
> >>>>>> 23:  no reply
> >>>>>> 24:  no reply
> >>>>>> 25:  no reply
> >>>>>> 26:  no reply
> >>>>>> 27:  no reply
> >>>>>> 28:  no reply
> >>>>>> 29:  no reply
> >>>>>> 30:  no reply
> >>>>>> 31:  no reply
> >>>>>>     Too many hops: pmtu 1500
> >>>>>>     Resume: pmtu 1500
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> If there's a firewall with a bias against South Africa, it's in the
> >>>>>>> middle of, or perhaps at the edge of, extremezone.com.
> >>>>>>>
> >>>>>>> _______________________________________________
> >>>>>>> server-admins mailing list
> >>>>>>> 
> server-admins at crosswire.org
> 
> >>>>>>> 
> http://www.crosswire.org/mailman/listinfo/server-admins
> 
> >>>>
> >>>>
> >>>
> >
> 
> _______________________________________________
> server-admins mailing list
> server-admins at crosswire.org
> http://www.crosswire.org/mailman/listinfo/server-admins




More information about the server-admins mailing list