Node list problem on node 29997

Hi list,
I'm wondering if there is an issue with node 29997 server side. The node will not download the node list.
I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.
Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.
When I look at stats.allstarlink.org, the node shows as being online.
None of the other nodes that I manage are having this issue.
Any assistance with resolving this issue is appreciated.

73,
W0JRL

http://www.checkupdown.com/status/E403.html

···

So, check that the url in your update script is formatted properly or there are no extraneous characters in the wget statement that actually grabs the file. 403 is the web server’s response to an http request that is forbidden. IOW, you are asking for something which the web server is configured to not give you.

Entitely different than the registration process that puts your node in the list.


Bryan

Sent from my iPhone 6S…No electrons were harmed in the sending of this message.

On May 29, 2016, at 17:12, Jeremy Lincicome w0jrl1@gmail.com wrote:

Hi list,
I’m wondering if there is an issue with node 29997 server side. The node will not download the node list.
I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.
Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.
When I look at stats.allstarlink.org, the node shows as being online.
None of the other nodes that I manage are having this issue.
Any assistance with resolving this issue is appreciated.

73,
W0JRL


App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

Jeremy,

The issue is that node 29997 isn't properly registered with
Asterisk---check the registration settings in you iax.conf file or
firewall/network changes.

The nodelist servers return a 403 error when a nodelist download request
is performed from unrecognized IP addresses---the query IP address isn't
allowed if the registration process fails.

73, David KB4FXC

Error 403: A Comprehensive Guide to Resolution

So, check that the url in your update script is formatted properly or

there are no extraneous characters in the wget statement that actually
grabs the file. 403 is the web server's response to an http request that
is forbidden. IOW, you are asking for something which the web server is
configured to not give you.

···

On Sun, 29 May 2016, Bryan D. Boyle wrote:

Entitely different than the registration process that puts your node in the list.

--
Bryan
Sent from my iPhone 6S...No electrons were harmed in the sending of this message.

> On May 29, 2016, at 17:12, Jeremy Lincicome <w0jrl1@gmail.com> wrote:
>
> Hi list,
> I'm wondering if there is an issue with node 29997 server side. The node will not download the node list.
> I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.
> Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.
> When I look at stats.allstarlink.org, the node shows as being online.
> None of the other nodes that I manage are having this issue.
> Any assistance with resolving this issue is appreciated.
>
> 73,
> W0JRL
> _______________________________________________
> App_rpt-users mailing list
> App_rpt-users@ohnosec.org
> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>
> To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

Bryan,
I checked the rc.updatenodelist script and the url looks fine. I also checked the router firewall settings, and the router is set up correctly.
David,
I looked at iax.conf, and it seams to be set up correctly.
The register statement looks like:
register = 29997:123456@register.allstarlink.org (not the real password)
Also, I performed the following steps:
1. asterisk -vvvr
2. iax2 show registry
The output that I get is:
Host dnsmgr Username Perceived Refresh State
67.215.233.178:4569 Y 29997 <Unregistered> 60 Timeout
I'm not able to browse to allstarlink.org. However, google.com, duckduckgo.com, and stats.allstarlink.org all work fine.

73,
Jeremy W0JRL

···

On 05/29/2016 07:45 PM, David McGough wrote:

Jeremy,

The issue is that node 29997 isn't properly registered with
Asterisk---check the registration settings in you iax.conf file or
firewall/network changes.

The nodelist servers return a 403 error when a nodelist download request
is performed from unrecognized IP addresses---the query IP address isn't
allowed if the registration process fails.

73, David KB4FXC

On Sun, 29 May 2016, Bryan D. Boyle wrote:

Error 403: A Comprehensive Guide to Resolution

So, check that the url in your update script is formatted properly or

there are no extraneous characters in the wget statement that actually
grabs the file. 403 is the web server's response to an http request that
is forbidden. IOW, you are asking for something which the web server is
configured to not give you.

Entitely different than the registration process that puts your node in the list.

--
Bryan
Sent from my iPhone 6S...No electrons were harmed in the sending of this message.

On May 29, 2016, at 17:12, Jeremy Lincicome <w0jrl1@gmail.com> wrote:

Hi list,
I'm wondering if there is an issue with node 29997 server side. The node will not download the node list.
I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.
Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.
When I look at stats.allstarlink.org, the node shows as being online.
None of the other nodes that I manage are having this issue.
Any assistance with resolving this issue is appreciated.

73,
W0JRL
_______________________________________________
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

_______________________________________________
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

What does this give you?

nslookup allstarlink.org

and ping & traceroute

67.215.233.179

Mark

···

On Sun, May 29, 2016 at 9:21 PM, Jeremy Lincicome w0jrl1@gmail.com wrote:

Bryan,

I checked the rc.updatenodelist script and the url looks fine. I also checked the router firewall settings, and the router is set up correctly.

David,

I looked at iax.conf, and it seams to be set up correctly.

The register statement looks like:

register = 29997:123456@register.allstarlink.org (not the real password)

Also, I performed the following steps:

  1. asterisk -vvvr

  2. iax2 show registry

The output that I get is:

Host dnsmgr Username Perceived Refresh State

67.215.233.178:4569 Y 29997 60 Timeout

I’m not able to browse to allstarlink.org. However, google.com, duckduckgo.com, and stats.allstarlink.org all work fine.

73,

Jeremy W0JRL

On 05/29/2016 07:45 PM, David McGough wrote:

Jeremy,

The issue is that node 29997 isn’t properly registered with

Asterisk—check the registration settings in you iax.conf file or

firewall/network changes.

The nodelist servers return a 403 error when a nodelist download request

is performed from unrecognized IP addresses—the query IP address isn’t

allowed if the registration process fails.

73, David KB4FXC

On Sun, 29 May 2016, Bryan D. Boyle wrote:

http://www.checkupdown.com/status/E403.html

So, check that the url in your update script is formatted properly or
there are no extraneous characters in the wget statement that actually

grabs the file. 403 is the web server’s response to an http request that

is forbidden. IOW, you are asking for something which the web server is

configured to not give you.

Entitely different than the registration process that puts your node in the list.

Bryan

Sent from my iPhone 6S…No electrons were harmed in the sending of this message.

On May 29, 2016, at 17:12, Jeremy Lincicome w0jrl1@gmail.com wrote:

Hi list,

I’m wondering if there is an issue with node 29997 server side. The node will not download the node list.

I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.

Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.

When I look at stats.allstarlink.org, the node shows as being online.

None of the other nodes that I manage are having this issue.

Any assistance with resolving this issue is appreciated.

73,

W0JRL


App_rpt-users mailing list

App_rpt-users@ohnosec.org

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”

You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.


App_rpt-users mailing list

App_rpt-users@ohnosec.org

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”

You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.


App_rpt-users mailing list

App_rpt-users@ohnosec.org

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”

You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

“Got Root?”

How many software engineers does it take to change a light bulb?

None. It’s a hardware problem.

Unix is user friendly. It’s just very particular about who it’s friends are.

WINDOWS: Will Install Needless Data On Whole System

MICROSOFT: Most Intelligent Customers Realize Our Software Only Fools Teenagers.

A ntennas
P oorly
P laced
L acks
E ngineering

The best way to accelerate a computer running Windows is at 9.81 m/s².

“I get paid to support Windows, I use Linux to get work done.”

Jeremy,

The "State" column should say "Registered" not "Unregistered"

Check your password, etc...Node 29997 isn't currently in the nodes list,
based on the list downloaded on my hub server.

If everything is correct, try shutting Asterisk down completely for
several (perhaps 5) minutes and then restart.

73, David KB4FXC

···

On Sun, 29 May 2016, Jeremy Lincicome wrote:

Bryan,
I checked the rc.updatenodelist script and the url looks fine. I also
checked the router firewall settings, and the router is set up correctly.
David,
I looked at iax.conf, and it seams to be set up correctly.
The register statement looks like:
register = 29997:123456@register.allstarlink.org (not the real password)
Also, I performed the following steps:
1. asterisk -vvvr
2. iax2 show registry
The output that I get is:
Host dnsmgr Username Perceived Refresh State
67.215.233.178:4569 Y 29997 <Unregistered> 60 Timeout
I'm not able to browse to allstarlink.org. However, google.com,
duckduckgo.com, and stats.allstarlink.org all work fine.

73,
Jeremy W0JRL

On 05/29/2016 07:45 PM, David McGough wrote:
> Jeremy,
>
> The issue is that node 29997 isn't properly registered with
> Asterisk---check the registration settings in you iax.conf file or
> firewall/network changes.
>
> The nodelist servers return a 403 error when a nodelist download request
> is performed from unrecognized IP addresses---the query IP address isn't
> allowed if the registration process fails.
>
> 73, David KB4FXC
>
>
>
>
>
> On Sun, 29 May 2016, Bryan D. Boyle wrote:
>
>> Error 403: A Comprehensive Guide to Resolution
>>
>> So, check that the url in your update script is formatted properly or
> there are no extraneous characters in the wget statement that actually
> grabs the file. 403 is the web server's response to an http request that
> is forbidden. IOW, you are asking for something which the web server is
> configured to not give you.
>> Entitely different than the registration process that puts your node in the list.
>>
>> --
>> Bryan
>> Sent from my iPhone 6S...No electrons were harmed in the sending of this message.
>>
>>
>>
>>> On May 29, 2016, at 17:12, Jeremy Lincicome <w0jrl1@gmail.com> wrote:
>>>
>>> Hi list,
>>> I'm wondering if there is an issue with node 29997 server side. The node will not download the node list.
>>> I thought that I may have caused the issue by changing firewall settings on the router. However, after factory resetting the router, the list will still not download.
>>> Watching the node on a traffic analyzer, it looks like the node is receiving 403 errors from the servers.
>>> When I look at stats.allstarlink.org, the node shows as being online.
>>> None of the other nodes that I manage are having this issue.
>>> Any assistance with resolving this issue is appreciated.
>>>
>>> 73,
>>> W0JRL
>>> _______________________________________________
>>> App_rpt-users mailing list
>>> App_rpt-users@ohnosec.org
>>> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>
>>> To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>>> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
> _______________________________________________
> App_rpt-users mailing list
> App_rpt-users@ohnosec.org
> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>
> To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

_______________________________________________
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

Mark,

Here are the results of nslookup, ping, and traceroute.

nslookup allstarlink.org

Server:        127.0.1.1

Address:    127.0.1.1#53

Non-authoritative answer:

Name:    allstarlink.org

Address: 67.215.233.179

ping -c4 67.215.233.179:

PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.

--- 67.215.233.179 ping statistics ---

4 packets transmitted, 0 received, 100% packet loss, time 3024ms

traceroute 67.215.233.179

traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte

packets

 1  DD-WRT (192.168.55.1)  5.094 ms  22.644 ms  22.651 ms

 2  216-98-194-1.forethought.net (216.98.194.1)  25.671 ms  31.059

ms 40.912 ms

 3  vl203.de01.forethought.net (206.124.21.201)  40.914 ms  40.908

ms 40.908 ms

 4  216-241-35-213.static.forethought.net (216.241.35.213)  40.904

ms 40.897 ms 40.888 ms

 5  206-124-24-110.static.forethought.net (206.124.24.110)  44.864

ms 44.866 ms 75.615 ms

 6  te4-1.cr01.lax.citylinkfiber.net (216.243.117.17)  86.184 ms 

58.349 ms 45.012 ms

 7  te4-1.cr01.sjc.citylinkfiber.net (216.243.119.129)  59.803 ms 

59.797 ms 59.789 ms

 8  * * *

 9  * * *

10  * * *

11  * * *

12  * * *

13  * * *

14  * * *

15  * * *

16  * * *

17  * * *

18  * * *

19  * * *

20  * * *

21  * * *

22  * * *

23  * * *

24  * * *

25  * * *

26  * * *

27  * * *

28  * * *

29  * * *

30  * * *

Jeremy W0JRL
···

On 05/29/2016 10:27 PM, Mark Johnston
wrote:

What does this give you?

nslookup allstarlink.org

and ping & traceroute

67.215.233.179

Mark

“Got Root?”

              How

many software engineers does it take to change a light
bulb?

** None.
It’s a hardware problem.**

            Unix

is user friendly. It’s just very particular about who
it’s friends are.

              WINDOWS: Will Install

Needless Data On Whole System

                MICROSOFT: Most

Intelligent Customers Realize Our Software Only
Fools Teenagers.

            A

ntennas

            P oorly

            P laced

            L acks

            E ngineering



          The best way to accelerate a computer running Windows is

at 9.81 m/s².

**** “I
get paid to support Windows, I use Linux to
get work done.”****

      On Sun, May 29, 2016 at 9:21 PM, Jeremy

Lincicome w0jrl1@gmail.com
wrote:

Bryan,

        I checked the rc.updatenodelist script and the url looks

fine. I also checked the router firewall settings, and the
router is set up correctly.

        David,

        I looked at iax.conf, and it seams to be set up correctly.

        The register statement looks like:

        register = 29997:123456@register.allstarlink.org
        (not the real password)

        Also, I performed the following steps:

        1. asterisk -vvvr

        2. iax2 show registry

        The output that I get is:

        Host                  dnsmgr  Username    Perceived Refresh 

State

        [67.215.233.178:4569](http://67.215.233.178:4569)             

Y 29997 60 Timeout

        I'm not able to browse to [allstarlink.org](http://allstarlink.org). However, [google.com](http://google.com), [duckduckgo.com](http://duckduckgo.com), and [stats.allstarlink.org](http://stats.allstarlink.org)
        all work fine.



        73,

        Jeremy W0JRL




            On 05/29/2016 07:45 PM, David McGough wrote:

Jeremy,

              The issue is that node 29997 isn't properly registered

with

              Asterisk---check the registration settings in you

iax.conf file or

              firewall/network changes.



              The nodelist servers return a 403 error when a

nodelist download request

              is performed from unrecognized IP addresses---the

query IP address isn’t

              allowed if the registration process fails.



              73, David KB4FXC











              On Sun, 29 May 2016, Bryan D. Boyle wrote:

http://www.checkupdown.com/status/E403.html

                So, check that the url in your update script is

formatted properly or
there are no extraneous characters in the wget
statement that actually

              grabs the file.  403 is the web server's response to

an http request that

              is forbidden.  IOW, you are asking for something which

the web server is

              configured to not give you.
                Entitely different than the registration process

that puts your node in the list.

                --

                Bryan

                Sent from my iPhone 6S...No electrons were harmed in

the sending of this message.

On May 29, 2016, at 17:12, Jeremy Lincicome < >
wrote:
Hi list,
I’m wondering if there is an issue with node 29997
server side. The node will not download the node
list.
I thought that I may have caused the issue by
changing firewall settings on the router. However,
after factory resetting the router, the list will
still not download.
Watching the node on a traffic analyzer, it looks
like the node is receiving 403 errors from the
servers.
When I look at ,
the node shows as being online.
None of the other nodes that I manage are having
this issue.
Any assistance with resolving this issue is
appreciated.
73,
W0JRL


App_rpt-users mailing list
To unsubscribe from this list please visit and scroll down to the bottom of the page. Enter
your email address and press the “Unsubscribe or
edit options button”
You do not need a password to unsubscribe, you can
do it via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.


              App_rpt-users mailing list

              App_rpt-users@ohnosec.org

              [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



              To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
              and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit
options button”
You do not need a password to unsubscribe, you can do
it via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

            _______________________________________________

            App_rpt-users mailing list

            App_rpt-users@ohnosec.org

            [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



            To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
            and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit options
button”
You do not need a password to unsubscribe, you can do it
via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

w0jrl1@gmail.com

stats.allstarlink.org

App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

Something odd with your route it seems… you can see my results below.

At least we know your DNS is working…

traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte packets

1 192.168.0.1 (192.168.0.1) 0.379 ms 0.458 ms 0.579 ms

2 192.168.2.1 (192.168.2.1) 3.168 ms 3.208 ms 3.231 ms

3 bc1041.bendcable.com (66.220.104.1) 13.333 ms 15.273 ms 15.498 ms

4 60.157.100.208.bendbroadband.com (208.100.157.60) 15.756 ms 15.786 ms 15.924 ms

5 70.157.100.208.bendbroadband.com (208.100.157.70) 20.173 ms 20.257 ms 20.489 ms

6 208.100.157.0 (208.100.157.0) 27.521 ms 16.976 ms 19.051 ms

7 six.zayo.com (206.81.80.19) 22.664 ms 22.883 ms 22.548 ms

8 ae27.cs1.sea1.us.eth.zayo.com (64.125.29.0) 55.704 ms 55.915 ms 56.127 ms

9 ae3.cs1.sjc2.us.eth.zayo.com (64.125.29.42) 56.431 ms 60.333 ms 60.052 ms

10 ae0.cs2.sjc2.us.eth.zayo.com (64.125.28.141) 67.345 ms 67.765 ms 67.482 ms

11 ae2.cs2.lax112.us.eth.zayo.com (64.125.28.197) 65.084 ms 48.807 ms 53.387 ms

12 ae27.cr2.lax112.us.zip.zayo.com (64.125.30.187) 46.289 ms 49.735 ms 49.945 ms

13 ae10.er4.lax112.us.zip.zayo.com (64.125.21.114) 49.444 ms 45.777 ms 46.816 ms

14 64.124.85.222.IPYX-128160-956-ZYO.zip.zayo.com (64.124.85.222) 49.061 ms 49.881 ms 49.968 ms

15 colo-lax6.as8100.net (96.44.180.34) 50.081 ms 56.042 ms 55.644 ms

16 allstarlink.org (67.215.233.179) 56.172 ms 56.345 ms 59.065 ms

root@KC7DMF-1:/etc/asterisk/scripts/nws# ping 67.215.233.179

PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.

64 bytes from 67.215.233.179: icmp_seq=1 ttl=54 time=52.9 ms

64 bytes from 67.215.233.179: icmp_seq=2 ttl=54 time=55.0 ms

64 bytes from 67.215.233.179: icmp_seq=3 ttl=54 time=47.5 ms

64 bytes from 67.215.233.179: icmp_seq=4 ttl=54 time=42.7 ms

···

On Sun, May 29, 2016 at 10:08 PM, Jeremy Lincicome w0jrl1@gmail.com wrote:

Mark,

Here are the results of nslookup, ping, and traceroute.



nslookup [allstarlink.org](http://allstarlink.org)

Server:        127.0.1.1

Address:    127.0.1.1#53



Non-authoritative answer:

Name:    [allstarlink.org](http://allstarlink.org)

Address: 67.215.233.179



ping -c4 [67.215.233.179](http://67.215.233.179):

PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.



--- 67.215.233.179 ping statistics ---

4 packets transmitted, 0 received, 100% packet loss, time 3024ms



traceroute 67.215.233.179

traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte

packets

 1  DD-WRT (192.168.55.1)  5.094 ms  22.644 ms  22.651 ms

 2  [216-98-194-1.forethought.net](http://216-98-194-1.forethought.net) (216.98.194.1)  25.671 ms  31.059

ms 40.912 ms

 3  [vl203.de01.forethought.net](http://vl203.de01.forethought.net) (206.124.21.201)  40.914 ms  40.908

ms 40.908 ms

 4  [216-241-35-213.static.forethought.net](http://216-241-35-213.static.forethought.net) (216.241.35.213)  40.904

ms 40.897 ms 40.888 ms

 5  [206-124-24-110.static.forethought.net](http://206-124-24-110.static.forethought.net) (206.124.24.110)  44.864

ms 44.866 ms 75.615 ms

 6  [te4-1.cr01.lax.citylinkfiber.net](http://te4-1.cr01.lax.citylinkfiber.net) (216.243.117.17)  86.184 ms 

58.349 ms 45.012 ms

 7  [te4-1.cr01.sjc.citylinkfiber.net](http://te4-1.cr01.sjc.citylinkfiber.net) (216.243.119.129)  59.803 ms 

59.797 ms 59.789 ms

 8  * * *

 9  * * *

10  * * *

11  * * *

12  * * *

13  * * *

14  * * *

15  * * *

16  * * *

17  * * *

18  * * *

19  * * *

20  * * *

21  * * *

22  * * *

23  * * *

24  * * *

25  * * *

26  * * *

27  * * *

28  * * *

29  * * *

30  * * *



Jeremy W0JRL



  On 05/29/2016 10:27 PM, Mark Johnston

wrote:

What does this give you?

nslookup allstarlink.org

and ping & traceroute

67.215.233.179

Mark

“Got Root?”

How many software engineers does it take to change a light bulb?

None. It’s a hardware problem.

Unix is user friendly. It’s just very particular about who it’s friends are.

WINDOWS: Will Install Needless Data On Whole System

MICROSOFT: Most Intelligent Customers Realize Our Software Only Fools Teenagers.

A ntennas
P oorly
P laced
L acks
E ngineering

The best way to accelerate a computer running Windows is at 9.81 m/s².

“I get paid to support Windows, I use Linux to get work done.”

“Got Root?”

              How

many software engineers does it take to change a light
bulb?

** None.
It’s a hardware problem.**

            Unix

is user friendly. It’s just very particular about who
it’s friends are.

              WINDOWS: Will Install

Needless Data On Whole System

                MICROSOFT: Most

Intelligent Customers Realize Our Software Only
Fools Teenagers.

            A

ntennas

            P oorly

            P laced

            L acks

            E ngineering

          The best way to accelerate a computer running Windows is

at 9.81 m/s².

**** “I
get paid to support Windows, I use Linux to
get work done.”****

      On Sun, May 29, 2016 at 9:21 PM, Jeremy

Lincicome w0jrl1@gmail.com
wrote:

Bryan,

        I checked the rc.updatenodelist script and the url looks

fine. I also checked the router firewall settings, and the
router is set up correctly.

        David,

        I looked at iax.conf, and it seams to be set up correctly.

        The register statement looks like:

        register = 29997:123456@register.allstarlink.org
        (not the real password)

        Also, I performed the following steps:

        1. asterisk -vvvr

        2. iax2 show registry

        The output that I get is:

        Host                  dnsmgr  Username    Perceived Refresh 

State

        [67.215.233.178:4569](http://67.215.233.178:4569)             

Y 29997 60 Timeout

        I'm not able to browse to [allstarlink.org](http://allstarlink.org). However, [google.com](http://google.com), [duckduckgo.com](http://duckduckgo.com), and [stats.allstarlink.org](http://stats.allstarlink.org)
        all work fine.



        73,

        Jeremy W0JRL




            On 05/29/2016 07:45 PM, David McGough wrote:

Jeremy,

              The issue is that node 29997 isn't properly registered

with

              Asterisk---check the registration settings in you

iax.conf file or

              firewall/network changes.



              The nodelist servers return a 403 error when a

nodelist download request

              is performed from unrecognized IP addresses---the

query IP address isn’t

              allowed if the registration process fails.



              73, David KB4FXC











              On Sun, 29 May 2016, Bryan D. Boyle wrote:

http://www.checkupdown.com/status/E403.html

                So, check that the url in your update script is

formatted properly or
there are no extraneous characters in the wget
statement that actually

              grabs the file.  403 is the web server's response to

an http request that

              is forbidden.  IOW, you are asking for something which

the web server is

              configured to not give you.
                Entitely different than the registration process

that puts your node in the list.

                --

                Bryan

                Sent from my iPhone 6S...No electrons were harmed in

the sending of this message.

On May 29, 2016, at 17:12, Jeremy Lincicome <w0jrl1@gmail.com >
wrote:

                  Hi list,

                  I'm wondering if there is an issue with node 29997

server side. The node will not download the node
list.

                  I thought that I may have caused the issue by

changing firewall settings on the router. However,
after factory resetting the router, the list will
still not download.

                  Watching the node on a traffic analyzer, it looks

like the node is receiving 403 errors from the
servers.

                  When I look at [stats.allstarlink.org](http://stats.allstarlink.org)                      ,

the node shows as being online.

                  None of the other nodes that I manage are having

this issue.

                  Any assistance with resolving this issue is

appreciated.

                  73,

                  W0JRL

                  _______________________________________________

                  App_rpt-users mailing list

                  App_rpt-users@ohnosec.org

                  [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



                  To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)[http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
                  and scroll down to the bottom of the page. Enter

your email address and press the “Unsubscribe or
edit options button”

                  You do not need a password to unsubscribe, you can

do it via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.


              App_rpt-users mailing list

              App_rpt-users@ohnosec.org

              [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



              To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)[http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
              and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit
options button”

              You do not need a password to unsubscribe, you can do

it via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

            _______________________________________________

            App_rpt-users mailing list

            App_rpt-users@ohnosec.org

            [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



            To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)[http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
            and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit options
button”

            You do not need a password to unsubscribe, you can do it

via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

Jeremy,

To confirm if your Internet is working and you can get to the
registration server, try:

wget http://register.allstarlink.org

If you get a "401 Authorization Required" error back, you can see the
registration server just fine via TCP.

73, David KB4FXC

···

On Sun, 29 May 2016, Jeremy Lincicome wrote:

Mark,
Here are the results of nslookup, ping, and traceroute.

nslookup allstarlink.org
Server: 127.0.1.1
Address: 127.0.1.1#53

Non-authoritative answer:
Name: allstarlink.org
Address: 67.215.233.179

ping -c4 67.215.233.179:
PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.

--- 67.215.233.179 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3024ms

traceroute 67.215.233.179
traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte packets
  1 DD-WRT (192.168.55.1) 5.094 ms 22.644 ms 22.651 ms
  2 216-98-194-1.forethought.net (216.98.194.1) 25.671 ms 31.059 ms
40.912 ms
  3 vl203.de01.forethought.net (206.124.21.201) 40.914 ms 40.908 ms
40.908 ms
  4 216-241-35-213.static.forethought.net (216.241.35.213) 40.904 ms
40.897 ms 40.888 ms
  5 206-124-24-110.static.forethought.net (206.124.24.110) 44.864 ms
44.866 ms 75.615 ms
  6 te4-1.cr01.lax.citylinkfiber.net (216.243.117.17) 86.184 ms 58.349
ms 45.012 ms
  7 te4-1.cr01.sjc.citylinkfiber.net (216.243.119.129) 59.803 ms
59.797 ms 59.789 ms
  8 * * *
  9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Jeremy W0JRL

Loren,
That script has been on the node since I built it over a year ago. Thank you for the suggestion though. DNS is provided by the ISP through the router.
David,
When I run:

wget http://register.allstarlink.org

The terminal just hangs. I have to kill it with CTRL c. However, if I ping google.com, I get an immediate response.

Jeremy W0JRL

···

On 05/29/2016 11:32 PM, David McGough wrote:

Jeremy,

To confirm if your Internet is working and you can get to the
registration server, try:

wget http://register.allstarlink.org

If you get a "401 Authorization Required" error back, you can see the
registration server just fine via TCP.

73, David KB4FXC

On Sun, 29 May 2016, Jeremy Lincicome wrote:

Mark,
Here are the results of nslookup, ping, and traceroute.

nslookup allstarlink.org
Server: 127.0.1.1
Address: 127.0.1.1#53

Non-authoritative answer:
Name: allstarlink.org
Address: 67.215.233.179

ping -c4 67.215.233.179:
PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.

--- 67.215.233.179 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3024ms

traceroute 67.215.233.179
traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte packets
   1 DD-WRT (192.168.55.1) 5.094 ms 22.644 ms 22.651 ms
   2 216-98-194-1.forethought.net (216.98.194.1) 25.671 ms 31.059 ms
40.912 ms
   3 vl203.de01.forethought.net (206.124.21.201) 40.914 ms 40.908 ms
40.908 ms
   4 216-241-35-213.static.forethought.net (216.241.35.213) 40.904 ms
40.897 ms 40.888 ms
   5 206-124-24-110.static.forethought.net (206.124.24.110) 44.864 ms
44.866 ms 75.615 ms
   6 te4-1.cr01.lax.citylinkfiber.net (216.243.117.17) 86.184 ms 58.349
ms 45.012 ms
   7 te4-1.cr01.sjc.citylinkfiber.net (216.243.119.129) 59.803 ms
59.797 ms 59.789 ms
   8 * * *
   9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Jeremy W0JRL

_______________________________________________
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

Is there another computer on this same router/network PC/Mac/Linux anything? can it ping/complete a traceroute to allstarlink.org or the IP either way…?
if it can, perhaps something with this computer’s configuration, might try getting a diff internal IP for it… make sure iptables and all that are not enabled

is it practical to bypass the router? as a test.

/etc/hosts.deny is there anything in there etc?

···

On Sun, May 29, 2016 at 11:16 PM, Jeremy Lincicome w0jrl1@gmail.com wrote:

Loren,

That script has been on the node since I built it over a year ago. Thank you for the suggestion though. DNS is provided by the ISP through the router.

David,

When I run:

wget http://register.allstarlink.org

The terminal just hangs. I have to kill it with CTRL c. However, if I ping google.com, I get an immediate response.

Jeremy W0JRL

On 05/29/2016 11:32 PM, David McGough wrote:

Jeremy,

To confirm if your Internet is working and you can get to the

registration server, try:

wget http://register.allstarlink.org

If you get a “401 Authorization Required” error back, you can see the

registration server just fine via TCP.

73, David KB4FXC

On Sun, 29 May 2016, Jeremy Lincicome wrote:

Mark,

Here are the results of nslookup, ping, and traceroute.

nslookup allstarlink.org

Server: 127.0.1.1

Address: 127.0.1.1#53

Non-authoritative answer:

Name: allstarlink.org

Address: 67.215.233.179

ping -c4 67.215.233.179:

PING 67.215.233.179 (67.215.233.179) 56(84) bytes of data.

— 67.215.233.179 ping statistics —

4 packets transmitted, 0 received, 100% packet loss, time 3024ms

traceroute 67.215.233.179

traceroute to 67.215.233.179 (67.215.233.179), 30 hops max, 60 byte packets

1 DD-WRT (192.168.55.1) 5.094 ms 22.644 ms 22.651 ms

2 216-98-194-1.forethought.net (216.98.194.1) 25.671 ms 31.059 ms

40.912 ms

3 vl203.de01.forethought.net (206.124.21.201) 40.914 ms 40.908 ms

40.908 ms

4 216-241-35-213.static.forethought.net (216.241.35.213) 40.904 ms

40.897 ms 40.888 ms

5 206-124-24-110.static.forethought.net (206.124.24.110) 44.864 ms

44.866 ms 75.615 ms

6 te4-1.cr01.lax.citylinkfiber.net (216.243.117.17) 86.184 ms 58.349

ms 45.012 ms

7 te4-1.cr01.sjc.citylinkfiber.net (216.243.119.129) 59.803 ms

59.797 ms 59.789 ms

8 * * *

9 * * *

10 * * *

11 * * *

12 * * *

13 * * *

14 * * *

15 * * *

16 * * *

17 * * *

18 * * *

19 * * *

20 * * *

21 * * *

22 * * *

23 * * *

24 * * *

25 * * *

26 * * *

27 * * *

28 * * *

29 * * *

30 * * *

Jeremy W0JRL


App_rpt-users mailing list

App_rpt-users@ohnosec.org

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”

You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.


App_rpt-users mailing list

App_rpt-users@ohnosec.org

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the “Unsubscribe or edit options button”

You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

“Got Root?”

How many software engineers does it take to change a light bulb?

None. It’s a hardware problem.

Unix is user friendly. It’s just very particular about who it’s friends are.

WINDOWS: Will Install Needless Data On Whole System

MICROSOFT: Most Intelligent Customers Realize Our Software Only Fools Teenagers.

A ntennas
P oorly
P laced
L acks
E ngineering

The best way to accelerate a computer running Windows is at 9.81 m/s².

“I get paid to support Windows, I use Linux to get work done.”

The traceroute, ping, and nslookup were all run from a laptop on the
same network as the node. I wonder, is something like fail2ban
blocking the node server side? If I run:

wget I am able to download index.html. I'll try putting the node in the

DMZ and see what happens.

···

http://stats.allstarlink.org

  On 05/30/2016 02:21 AM, Mark Johnston

wrote:

    Is there another computer on this same

router/network PC/Mac/Linux anything? can it ping/complete a
traceroute to allstarlink.org or the IP
either way…?
if it can, perhaps something with this computer’s
configuration, might try getting a diff internal IP for it…
make sure iptables and all that are not enabled�

is it practical to bypass the router? as a test.

/etc/hosts.deny is there anything in there etc?

“Got Root?”

              How

many software engineers does it take to change a light
bulb?

** None.
It’s a hardware problem.**

            Unix

is user friendly. It’s just very particular about who
it’s friends are.

              WINDOWS: Will Install

Needless Data On Whole System

                MICROSOFT: Most

Intelligent Customers Realize Our Software Only
Fools Teenagers.

            A

ntennas

            P oorly

            P laced

            L acks

            E ngineering



          The best way to accelerate a computer running Windows is

at 9.81 m/s�.

**** “I
get paid to support Windows, I use Linux to
get work done.”****

      On Sun, May 29, 2016 at 11:16 PM,

Jeremy Lincicome <> wrote:

Loren,

        That script has been on the node since I built it over a

year ago. Thank you for the suggestion though. DNS is
provided by the ISP through the router.

        David,

        When I run:



        wget [http://register.allstarlink.org](http://register.allstarlink.org)



        The terminal just hangs. I have to kill it with CTRL c.

However, if I ping google.com ,
I get an immediate response.

        Jeremy W0JRL




            On 05/29/2016 11:32 PM, David McGough wrote:

Jeremy,

              To confirm if your Internet is working and you can get

to the

              registration server, try:



              wget [http://register.allstarlink.org](http://register.allstarlink.org)





              If you get a "401 Authorization Required" error back,

you can see the

              registration server just fine via TCP.





              73, David KB4FXC





              On Sun, 29 May 2016, Jeremy Lincicome wrote:

Mark,

                Here are the results of nslookup, ping, and

traceroute.

                nslookup [allstarlink.org](http://allstarlink.org)

                Server:� � � � 127.0.1.1

                Address:� � 127.0.1.1#53



                Non-authoritative answer:

                Name:� � [allstarlink.org](http://allstarlink.org)

                Address: 67.215.233.179



                ping -c4 [67.215.233.179](http://67.215.233.179):

                PING 67.215.233.179 (67.215.233.179) 56(84) bytes of

data.

                --- 67.215.233.179 ping statistics ---

                4 packets transmitted, 0 received, 100% packet loss,

time 3024ms

                traceroute 67.215.233.179

                traceroute to 67.215.233.179 (67.215.233.179), 30

hops max, 60 byte packets

                � �1� DD-WRT (192.168.55.1)� 5.094 ms� 22.644 ms�

22.651 ms

                � �2� [216-98-194-1.forethought.net](http://216-98-194-1.forethought.net)
                (216.98.194.1)� 25.671 ms� 31.059 ms

                40.912 ms

                � �3� [vl203.de01.forethought.net](http://vl203.de01.forethought.net)
                (206.124.21.201)� 40.914 ms� 40.908 ms

                40.908 ms

                � �4� [216-241-35-213.static.forethought.net](http://216-241-35-213.static.forethought.net)
                (216.241.35.213)� 40.904 ms

                40.897 ms� 40.888 ms

                � �5� [206-124-24-110.static.forethought.net](http://206-124-24-110.static.forethought.net)
                (206.124.24.110)� 44.864 ms

                44.866 ms� 75.615 ms

                � �6� [te4-1.cr01.lax.citylinkfiber.net](http://te4-1.cr01.lax.citylinkfiber.net)
                (216.243.117.17)� 86.184 ms 58.349

                ms� 45.012 ms

                � �7� [te4-1.cr01.sjc.citylinkfiber.net](http://te4-1.cr01.sjc.citylinkfiber.net)
                (216.243.119.129)� 59.803 ms

                59.797 ms� 59.789 ms

                � �8� * * *

                � �9� * * *

                10� * * *

                11� * * *

                12� * * *

                13� * * *

                14� * * *

                15� * * *

                16� * * *

                17� * * *

                18� * * *

                19� * * *

                20� * * *

                21� * * *

                22� * * *

                23� * * *

                24� * * *

                25� * * *

                26� * * *

                27� * * *

                28� * * *

                29� * * *

                30� * * *



                Jeremy W0JRL

              App_rpt-users mailing list

              App_rpt-users@ohnosec.org

              [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



              To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
              and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit
options button”
You do not need a password to unsubscribe, you can do
it via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

            _______________________________________________

            App_rpt-users mailing list

            App_rpt-users@ohnosec.org

            [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



            To unsubscribe from this list please visit [](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)
            and scroll down to the bottom of the page. Enter your

email address and press the “Unsubscribe or edit options
button”
You do not need a password to unsubscribe, you can do it
via email confirmation. If you have trouble
unsubscribing, please send a message to the list
detailing the problem.

w0jrl1@gmail.comhttp://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

After doing some research, I think the problem is being caused by
the ISP. 29997 seams to be the only node having the issue. I think
there might be a routing issue with Forethought. I’ll contact
Forethought tomorrow and see what they say.

However, I think it's weird that I'm only seeing the issue on

allstarlink.org and register.allstarlink.org.

···

On 05/30/2016 06:27 AM, Mark Johnston
wrote:

    If you have a way to change you public IP, if it

isn’t static/fixed - could be as simple as changing the MAC of
the WAN side on the router (assuming it has a pub IP) ,
hopefully after a refresh/reboot get a new IP, if it’s banned at
the server side then that would show it…

“Got Root?”

              How

many software engineers does it take to change a light
bulb?

** None.
It’s a hardware problem.**

            Unix

is user friendly. It’s just very particular about who
it’s friends are.

              WINDOWS: Will Install

Needless Data On Whole System

                MICROSOFT: Most

Intelligent Customers Realize Our Software Only
Fools Teenagers.

            A

ntennas

            P oorly

            P laced

            L acks

            E ngineering



          The best way to accelerate a computer running Windows is

at 9.81 m/s�.

**** “I
get paid to support Windows, I use Linux to
get work done.”****

      On Mon, May 30, 2016 at 2:10 AM, Jeremy

Lincicome w0jrl1@gmail.com
wrote:

          The traceroute, ping,

and nslookup were all run from a laptop on the same
network as the node. I wonder, is something like fail2ban
blocking the node server side? If I run:

          wget [http://stats.allstarlink.org](http://stats.allstarlink.org)

          I am able to download index.html. I'll try putting the

node in the DMZ and see what happens.

On 05/30/2016 02:21 AM, Mark Johnston wrote:

                  Is there another computer on this

same router/network PC/Mac/Linux anything? can it
ping/complete a traceroute to allstarlink.org
or the IP either way…?
if it can, perhaps something with this
computer’s configuration, might try getting a
diff internal IP for it… make sure iptables
and all that are not enabled�

                    is it practical to bypass the router? as a

test.

                    /etc/hosts.deny is there anything in there

etc?

“Got Root?”

                            How

many software engineers does it take to
change a light bulb?

**
None.
It’s a hardware problem.**

                          Unix

is user friendly. It’s just very
particular about who it’s friends are.

                            WINDOWS: Will

Install Needless Data On Whole System

                              MICROSOFT:

Most Intelligent Customers Realize Our
Software Only Fools Teenagers.

                          A

ntennas

                          P oorly

                          P laced

                          L acks

                          E ngineering



                        The best way to accelerate a computer

running Windows is at 9.81 m/s�.

**** “I get paid to
support Windows, I use Linux
to get work done.”****

                    On Sun, May 29, 2016 at

11:16 PM, Jeremy Lincicome <>
wrote:

Loren,

                      That script has been on the node since I built

it over a year ago. Thank you for the
suggestion though. DNS is provided by the ISP
through the router.

                      David,

                      When I run:



                      wget [http://register.allstarlink.org](http://register.allstarlink.org)



                      The terminal just hangs. I have to kill it

with CTRL c. However, if I ping google.com , I get an
immediate response.

                      Jeremy W0JRL




                          On 05/29/2016 11:32 PM, David McGough

wrote:

Jeremy,

                            To confirm if your Internet is working

and you can get to the

                            registration server, try:



                            wget [http://register.allstarlink.org](http://register.allstarlink.org)





                            If you get a "401 Authorization

Required" error back, you can see the

                            registration server just fine via TCP.





                            73, David KB4FXC





                            On Sun, 29 May 2016, Jeremy Lincicome

wrote:

Mark,

                              Here are the results of nslookup,

ping, and traceroute.

                              nslookup [allstarlink.org](http://allstarlink.org)

                              Server:� � � � 127.0.1.1

                              Address:� � 127.0.1.1#53



                              Non-authoritative answer:

                              Name:� � [allstarlink.org](http://allstarlink.org)

                              Address: 67.215.233.179



                              ping -c4 [67.215.233.179](http://67.215.233.179):

                              PING 67.215.233.179 (67.215.233.179)

56(84) bytes of data.

                              --- 67.215.233.179 ping statistics ---

                              4 packets transmitted, 0 received,

100% packet loss, time 3024ms

                              traceroute 67.215.233.179

                              traceroute to 67.215.233.179

(67.215.233.179), 30 hops max, 60 byte
packets

                              � �1� DD-WRT (192.168.55.1)� 5.094 ms�

22.644 ms� 22.651 ms

                              � �2� [216-98-194-1.forethought.net](http://216-98-194-1.forethought.net)
                              (216.98.194.1)� 25.671 ms� 31.059 ms

                              40.912 ms

                              � �3� [vl203.de01.forethought.net](http://vl203.de01.forethought.net)
                              (206.124.21.201)� 40.914 ms� 40.908 ms

                              40.908 ms

                              � �4� [216-241-35-213.static.forethought.net](http://216-241-35-213.static.forethought.net)
                              (216.241.35.213)� 40.904 ms

                              40.897 ms� 40.888 ms

                              � �5� [206-124-24-110.static.forethought.net](http://206-124-24-110.static.forethought.net)
                              (206.124.24.110)� 44.864 ms

                              44.866 ms� 75.615 ms

                              � �6� [te4-1.cr01.lax.citylinkfiber.net](http://te4-1.cr01.lax.citylinkfiber.net)
                              (216.243.117.17)� 86.184 ms 58.349

                              ms� 45.012 ms

                              � �7� [te4-1.cr01.sjc.citylinkfiber.net](http://te4-1.cr01.sjc.citylinkfiber.net)
                              (216.243.119.129)� 59.803 ms

                              59.797 ms� 59.789 ms

                              � �8� * * *

                              � �9� * * *

                              10� * * *

                              11� * * *

                              12� * * *

                              13� * * *

                              14� * * *

                              15� * * *

                              16� * * *

                              17� * * *

                              18� * * *

                              19� * * *

                              20� * * *

                              21� * * *

                              22� * * *

                              23� * * *

                              24� * * *

                              25� * * *

                              26� * * *

                              27� * * *

                              28� * * *

                              29� * * *

                              30� * * *



                              Jeremy W0JRL

                            App_rpt-users mailing list

                            App_rpt-users@ohnosec.org

                            [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



                            To unsubscribe from this list please

visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
and scroll down to the bottom of the
page. Enter your email address and press
the “Unsubscribe or edit options button”

                            You do not need a password to

unsubscribe, you can do it via email
confirmation. If you have trouble
unsubscribing, please send a message to
the list detailing the problem.


                          App_rpt-users mailing list

                          App_rpt-users@ohnosec.org

                          [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



                          To unsubscribe from this list please visit

http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
and scroll down to the bottom of the page.
Enter your email address and press the
“Unsubscribe or edit options button”

                          You do not need a password to unsubscribe,

you can do it via email confirmation. If
you have trouble unsubscribing, please
send a message to the list detailing the
problem.

w0jrl1@gmail.com

It turns out that the problem was with one of Forethought’s
switches. The node is now up and performing normally.

Thanks to those who tried to help troubleshoot.

73,

Jeremy W0JRL
···

http://jlappliedtechnologies.com

  On 05/30/2016 08:41 PM, Jeremy

Lincicome wrote:

  After doing some research, I think the problem is being caused by

the ISP. 29997 seams to be the only node having the issue. I think
there might be a routing issue with Forethought. I’ll contact
Forethought tomorrow and see what they say.

  However, I think it's weird that I'm only seeing the issue on

allstarlink.org and register.allstarlink.org.

    On 05/30/2016 06:27 AM, Mark Johnston

wrote:

      If you have a way to change you public IP, if it

isn’t static/fixed - could be as simple as changing the MAC of
the WAN side on the router (assuming it has a pub IP) ,
hopefully after a refresh/reboot get a new IP, if it’s banned
at the server side then that would show it…

“Got Root?”

                How

many software engineers does it take to change a
light bulb?

**
None.
It’s a hardware problem.**

              Unix

is user friendly. It’s just very particular about who
it’s friends are.

                WINDOWS: Will Install

Needless Data On Whole System

                  MICROSOFT: Most

Intelligent Customers Realize Our Software Only
Fools Teenagers.

              A

ntennas

              P oorly

              P laced

              L acks

              E ngineering



            The best way to accelerate a computer running Windows is

at 9.81 m/s�.

**** “I get paid to support
Windows, I use Linux to get work done.”****

        On Mon, May 30, 2016 at 2:10 AM,

Jeremy Lincicome <> wrote:

            The traceroute,

ping, and nslookup were all run from a laptop on the
same network as the node. I wonder, is something like
fail2ban blocking the node server side? If I run:

            wget [http://stats.allstarlink.org](http://stats.allstarlink.org)

            I am able to download index.html. I'll try putting the

node in the DMZ and see what happens.

On 05/30/2016 02:21 AM, Mark Johnston wrote:

                    Is there another computer on this

same router/network PC/Mac/Linux anything? can
it ping/complete a traceroute to allstarlink.org
or the IP either way…?
if it can, perhaps something with this
computer’s configuration, might try getting a
diff internal IP for it… make sure iptables
and all that are not enabled�

                      is it practical to bypass the router? as a

test.

                      /etc/hosts.deny is there anything in there

etc?

“Got Root?”

                              How

many software engineers does it take
to change a light bulb?

**
None.
It’s a hardware problem.**

                            Unix

is user friendly. It’s just very
particular about who it’s friends are.

                              WINDOWS:

Will Install Needless Data On Whole
System

                                MICROSOFT:

Most Intelligent Customers Realize
Our Software Only Fools Teenagers.

                            A

ntennas

                            P oorly

                            P laced

                            L acks

                            E ngineering



                          The best way to accelerate a computer

running Windows is at 9.81 m/s�.

**** “I get paid
to support Windows, I use
Linux to get work done.”****

                      On Sun, May 29, 2016 at

11:16 PM, Jeremy Lincicome <>
wrote:

Loren,

                        That script has been on the node since I

built it over a year ago. Thank you for the
suggestion though. DNS is provided by the
ISP through the router.

                        David,

                        When I run:



                        wget [http://register.allstarlink.org](http://register.allstarlink.org)



                        The terminal just hangs. I have to kill it

with CTRL c. However, if I ping google.com , I get an
immediate response.

                        Jeremy W0JRL




                            On 05/29/2016 11:32 PM, David McGough

wrote:

Jeremy,

                              To confirm if your Internet is working

and you can get to the

                              registration server, try:



                              wget [http://register.allstarlink.org](http://register.allstarlink.org)





                              If you get a "401 Authorization

Required" error back, you can see the

                              registration server just fine via TCP.





                              73, David KB4FXC





                              On Sun, 29 May 2016, Jeremy Lincicome

wrote:

Mark,

                                Here are the results of nslookup,

ping, and traceroute.

                                nslookup [allstarlink.org](http://allstarlink.org)

                                Server:� � � � 127.0.1.1

                                Address:� � 127.0.1.1#53



                                Non-authoritative answer:

                                Name:� � [allstarlink.org](http://allstarlink.org)

                                Address: 67.215.233.179



                                ping -c4 [67.215.233.179](http://67.215.233.179):

                                PING 67.215.233.179 (67.215.233.179)

56(84) bytes of data.

                                --- 67.215.233.179 ping statistics

                                4 packets transmitted, 0 received,

100% packet loss, time 3024ms

                                traceroute 67.215.233.179

                                traceroute to 67.215.233.179

(67.215.233.179), 30 hops max, 60
byte packets

                                � �1� DD-WRT (192.168.55.1)� 5.094

ms� 22.644 ms� 22.651 ms

                                � �2� [216-98-194-1.forethought.net](http://216-98-194-1.forethought.net)
                                (216.98.194.1)� 25.671 ms� 31.059 ms

                                40.912 ms

                                � �3� [vl203.de01.forethought.net](http://vl203.de01.forethought.net)
                                (206.124.21.201)� 40.914 ms� 40.908

ms

                                40.908 ms

                                � �4� [216-241-35-213.static.forethought.net](http://216-241-35-213.static.forethought.net)
                                (216.241.35.213)� 40.904 ms

                                40.897 ms� 40.888 ms

                                � �5� [206-124-24-110.static.forethought.net](http://206-124-24-110.static.forethought.net)
                                (206.124.24.110)� 44.864 ms

                                44.866 ms� 75.615 ms

                                � �6� [te4-1.cr01.lax.citylinkfiber.net](http://te4-1.cr01.lax.citylinkfiber.net)
                                (216.243.117.17)� 86.184 ms 58.349

                                ms� 45.012 ms

                                � �7� [te4-1.cr01.sjc.citylinkfiber.net](http://te4-1.cr01.sjc.citylinkfiber.net)
                                (216.243.119.129)� 59.803 ms

                                59.797 ms� 59.789 ms

                                � �8� * * *

                                � �9� * * *

                                10� * * *

                                11� * * *

                                12� * * *

                                13� * * *

                                14� * * *

                                15� * * *

                                16� * * *

                                17� * * *

                                18� * * *

                                19� * * *

                                20� * * *

                                21� * * *

                                22� * * *

                                23� * * *

                                24� * * *

                                25� * * *

                                26� * * *

                                27� * * *

                                28� * * *

                                29� * * *

                                30� * * *



                                Jeremy W0JRL

                              App_rpt-users mailing list

                              App_rpt-users@ohnosec.org

                              [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



                              To unsubscribe from this list please

visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
and scroll down to the bottom of the
page. Enter your email address and
press the “Unsubscribe or edit options
button”

                              You do not need a password to

unsubscribe, you can do it via email
confirmation. If you have trouble
unsubscribing, please send a message
to the list detailing the problem.


                            App_rpt-users mailing list

                            App_rpt-users@ohnosec.org

                            [http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users](http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users)



                            To unsubscribe from this list please

visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
and scroll down to the bottom of the
page. Enter your email address and press
the “Unsubscribe or edit options button”

                            You do not need a password to

unsubscribe, you can do it via email
confirmation. If you have trouble
unsubscribing, please send a message to
the list detailing the problem.

w0jrl1@gmail.comw0jrl1@gmail.com