From mboxrd@z Thu Jan 1 00:00:00 1970 From: Avi Kivity Subject: Re: kvm.qumranet.com uncontactable? Date: Mon, 13 Aug 2007 11:43:51 +0300 Message-ID: <46C019C7.7050304@qumranet.com> References: <200708112036.31951.alistair@devzero.co.uk> <46BEFDA7.8080009@qumranet.com> <68676e00708120556n7864b8fbq42695487df208ca@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: Alistair John Strachan , kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org To: Luca Return-path: In-Reply-To: <68676e00708120556n7864b8fbq42695487df208ca-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kvm-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org Errors-To: kvm-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org List-Id: kvm.vger.kernel.org Luca wrote: > On 8/12/07, Avi Kivity wrote: > >> Alistair John Strachan wrote: >> >>> Hi there, >>> >>> The site at kvm.qumranet.com seems to be inaccessible. My DNS comes directly >>> from the root servers, so it is not a DNS issue on my end. I seem to be able >>> to traceroute the domain, but a web browser will time out. >>> >>> Supposedly, it's there, as my colleague in the US can access the site, but it >>> does not work in the UK (on JANET). Netcraft.com cannot connect to it either. >>> >>> Could somebody please look into this? Thanks. >>> >> I'm just back from travel in the US, and can confirm this. From some >> locations, it works well; from others it doesn't work at all; and when >> the quantum state is just right you get half your packets dropped. >> >> I suspect that we just have a bad ISP that doesn't peer well. We'll >> work to fix this. >> > > Seems more like a firewall or something like that. IP routing is ok, I > can reach the server (from Italy) just fine, but nothing responds > (nothing at *all*, not event a RST - the same behaviour of iptables > DROP target BTW). > Well, when our UDP VPN managed to connect, I saw a lot of packet loss, but connectivity was there, which is inconsistent with a firewall. I'll ask that the rule restricting ICMP be removed so we can debug more easily. -- error compiling committee.c: too many arguments to function ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/