From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alistair John Strachan Subject: Re: kvm.qumranet.com uncontactable? Date: Tue, 14 Aug 2007 11:17:55 +0100 Message-ID: <200708141117.55895.alistair@devzero.co.uk> References: <200708112036.31951.alistair@devzero.co.uk> <68676e00708120556n7864b8fbq42695487df208ca@mail.gmail.com> <46C019C7.7050304@qumranet.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org To: Avi Kivity Return-path: In-Reply-To: <46C019C7.7050304-atKUWr5tajBWk0Htik3J/w@public.gmane.org> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kvm-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org Errors-To: kvm-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org List-Id: kvm.vger.kernel.org On Monday 13 August 2007 09:43:51 Avi Kivity wrote: > Luca wrote: > > On 8/12/07, Avi Kivity wrote: > >> Alistair John Strachan wrote: > >>> Hi there, > >>> > >>> The site at kvm.qumranet.com seems to be inaccessible. My DNS comes > >>> directly from the root servers, so it is not a DNS issue on my end. I > >>> seem to be able to traceroute the domain, but a web browser will time > >>> out. > >>> > >>> Supposedly, it's there, as my colleague in the US can access the site, > >>> but it does not work in the UK (on JANET). Netcraft.com cannot connect > >>> to it either. > >>> > >>> Could somebody please look into this? Thanks. > >> > >> I'm just back from travel in the US, and can confirm this. From some > >> locations, it works well; from others it doesn't work at all; and when > >> the quantum state is just right you get half your packets dropped. > >> > >> I suspect that we just have a bad ISP that doesn't peer well. We'll > >> work to fix this. > > > > Seems more like a firewall or something like that. IP routing is ok, I > > can reach the server (from Italy) just fine, but nothing responds > > (nothing at *all*, not event a RST - the same behaviour of iptables > > DROP target BTW). > > Well, when our UDP VPN managed to connect, I saw a lot of packet loss, > but connectivity was there, which is inconsistent with a firewall. I'll > ask that the rule restricting ICMP be removed so we can debug more easily. Seems to be working here again. Thanks. -- Cheers, Alistair. 137/1 Warrender Park Road, Edinburgh, UK. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/