Re: kvm.qumranet.com uncontactable?

Avi Kivity
2007-08-13T08:43:51Z

Luca wrote:
> On 8/12/07, Avi Kivity <avi-atKUWr5tajBWk0Htik3J/w@public.gmane.org> wrote:
>
>> Alistair John Strachan wrote:
>>
>>> Hi there,
>>>
>>> The site at kvm.qumranet.com seems to be inaccessible. My DNS comes directly
>>> from the root servers, so it is not a DNS issue on my end. I seem to be able
>>> to traceroute the domain, but a web browser will time out.
>>>
>>> Supposedly, it's there, as my colleague in the US can access the site, but it
>>> does not work in the UK (on JANET). Netcraft.com cannot connect to it either.
>>>
>>> Could somebody please look into this? Thanks.
>>>
>> I'm just back from travel in the US, and can confirm this. From some
>> locations, it works well; from others it doesn't work at all; and when
>> the quantum state is just right you get half your packets dropped.
>>
>> I suspect that we just have a bad ISP that doesn't peer well. We'll
>> work to fix this.
>>
>
> Seems more like a firewall or something like that. IP routing is ok, I
> can reach the server (from Italy) just fine, but nothing responds
> (nothing at *all*, not event a RST - the same behaviour of iptables
> DROP target BTW).
>

Well, when our UDP VPN managed to connect, I saw a lot of packet loss,
but connectivity was there, which is inconsistent with a firewall. I'll
ask that the rule restricting ICMP be removed so we can debug more easily.

--
error compiling committee.c: too many arguments to function