Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Nov 2007 08:30:25 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        Rodrigo Moura Bittencourt <rodrigob@cptec.inpe.br>
Cc:        freebsd-questions@FreeBSD.org
Subject:   Re: firewall is blocking our access
Message-ID:  <20071123083025.6c4de67c.wmoran@potentialtech.com>
In-Reply-To: <4746AB5C.8060501@cptec.inpe.br>
References:  <474560CF.8050108@cptec.inpe.br> <20071122192233.fa2c3f85.wmoran@potentialtech.com> <4746AB5C.8060501@cptec.inpe.br>

next in thread | previous in thread | raw e-mail | index | archive | help
Rodrigo Moura Bittencourt <rodrigob@cptec.inpe.br> wrote:
>
> Prazado Bill Moran,

Take a bit of advice -- wildly CCing dozens of people is just going to piss
people off and cause them to start ignoring you.  You'll get much more
helpful results if you take the time to understand who you need to be
contacting, and contact only that person.

I understand that in the business world it's normal to CC everyone and all
of their managers as well, but that's because in the business world,
politics is more important than getting things done.

> The reason we believe to be problems of a firewall is to make the 
> connection through a proxy, we managed to connect to your server.

I've no idea how that symptom would lead to that conclusion.

> Another problem that could consider is to have rules in our firewall 
> bloquendo access to your pages, but checking the rules found that there 
> is no restriction on our firewall rules regarding communication with 
> your server.

I assumed you checked that first.

> Here the annexed traceroute, stressing that the earlier steps are our 
> internal equipment:
> 
> 7 ansp.ptta.ansp.br (200.136.37.1) 6,820 ms 8,215 ms 8,370 ms
>   8 143 to 108-254-130.ansp.br (143,108,254,130) 8,614 ms 8,271 ms 
> 10,004 ms
>   9 g-1 - 1-0.ar1.GRU2.gblx.net (64.209.93.237) 9,704 ms 8,685 ms 8,206 ms
> 10 te3-1-10G.ar2.DCA3.gblx.net (67.16.128.1) 128,309 ms 127,803 ms 
> 128,290 ms
> 11 yahoo - 6.ar2.DCA3.gblx.net (64,215,195,110) 140,091 ms 140,141 ms 
> 138,295 ms
> 12 so-0 - 0-0.pat2.pao.yahoo.com (216,115,101,130) 193,000 ms 192,656 ms 
> 190,878 ms
> 13 g-1-0 - 0-p141.msr1.sp1.yahoo.com (216.115.107.55) 190,711 ms 193,645 
> ms 193,119 ms
> 14 ge-1-42.bas - b1.sp1.yahoo.com (209.131.32.27) 191,713 ms ge-1-48.bas 
> - b1.sp1.yahoo.com (209.131.32.47) 190,836 ms 190,406 ms

It certainly does look like Yahoo is blocking you for some reason.
This lends credence to my earlier statement about contacting the correct
person: there's little the FreeBSD team can do about this, you'll have to
contact Yahoo directly.

> Here also attached the ping in your server:
> 
> PING www.freebsd.org (69.147.83.33) 56 (84) bytes of data.
> 
> --- Www.freebsd.org ping statistics ---
> 33 packets transmitted, 0 received, 100% packet loss, time 32015ms

Unfortunately, ping results are nearly useless in this day and age, because
so many people block ICMP at firewalls as if it's the plague.

> I am the provision of any other information nescessaria,

Are you unable to reach the mirror sites in Brazil?:
http://www.br.freebsd.org/
This could be a workaround while you sort out the issue with Yahoo.
Actually, it may be preferable on an ongoing basis.

-- 
Bill Moran
http://www.potentialtech.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071123083025.6c4de67c.wmoran>