Tom, The IP address you got from DNS is correct and your traceroute shows you getting all
the way to our network (we block ICMP, 64.4.117.198 is our adjacent hop). We have had
problems recently with BGP and certain networks (I won't mention the problem ISP here)
not routing to us properly but I don't see that happening here. I checked over the
ACLs on our network devices there and the only reason I could think of for you to get
resets is one line that blocks a network that we were receiving attacks from (about 2
months ago). Coincidently it was a range owned by a colo in Orlando though not
specifically registered to Comcast. I've removed that deny now since the bot has
probably given up on our range by now.
If you don't mind could you give us your IP address or IP range and I can check my
firewalls and apache logs.
I apologize for the problem and appreciate you reporting it to us as we had no idea there
was an issue.
Chris Anderson
Network Security Engineer
Liberty University
-----Original Message-----
From: Tom Horsley [mailto:tom.horsley@att.net]
Sent: Tuesday, April 14, 2009 8:03 AM
To: Wilson, Tirian (IP Telephony)
Cc: Matt Domsch; Anderson, Christopher M. (Network Security);
mirror-admin(a)fedoraproject.org
Subject: Re:
mirrors.liberty.edu problem report
On Tue, 14 Apr 2009 07:03:39 -0400
Wilson, Tirian (IP Telephony) wrote:
Tom, could you please send me the output of "nslookup
mirror.liberty.edu" and "traceroute mirror.liberty.edu"?
Whatever is going on has been for more than a couple of weeks. It takes
much longer than that to get me irritated to the point of trying to
stop using that mirror :-). Anyway, here's the info. I'm using comcast
cable modem in south florida (and comcast DNS servers):
zooty> nslookup
mirror.liberty.edu
Server: 127.0.0.1
Address: 127.0.0.1#53
Non-authoritative answer:
Name:
mirror.liberty.edu
Address: 208.95.50.144
zooty> traceroute
mirror.liberty.edu
traceroute to
mirror.liberty.edu (208.95.50.144), 30 hops max, 60 byte packets
1 * * *
2
ge-1-4-ur01.delrayeast.fl.pompano.comcast.net (68.85.229.97) 26.827 ms 27.481 ms
31.896 ms
3
te-8-1-ur02.delrayeast.fl.pompano.comcast.net (68.86.165.190) 37.079 ms 40.675 ms
44.748 ms
4
te-8-1-ur01.bocaraton.fl.pompano.comcast.net (68.86.165.194) 50.228 ms 55.186 ms
59.423 ms
5
te-9-1-ur01.westboca.fl.pompano.comcast.net (68.86.165.109) 61.383 ms 62.060 ms
62.735 ms
6
te-9-1-ur01.staterd7.fl.pompano.comcast.net (68.86.165.89) 68.731 ms 43.019 ms
43.074 ms
7
te-0-12-0-4-ar03.northdade.fl.pompano.comcast.net (68.86.165.82) 42.038 ms 37.597 ms
34.720 ms
8
pos-0-5-0-0-cr01.miami.fl.ibone.comcast.net (68.86.91.81) 34.075 ms 35.537 ms
43.117 ms
9
pos-1-5-0-0-cr01.atlanta.ga.ibone.comcast.net (68.86.86.66) 44.198 ms 46.589 ms
51.132 ms
10
te3-2.ccr01.atl02.atlas.cogentco.com (154.54.11.13) 55.541 ms 54.215 ms 58.850 ms
11
te2-3.ccr01.atl01.atlas.cogentco.com (154.54.0.165) 63.522 ms
te2-1.ccr01.atl01.atlas.cogentco.com (154.54.0.161) 63.748 ms
te2-3.ccr01.atl01.atlas.cogentco.com (154.54.0.165) 67.571 ms
12
te8-4.ccr02.dca01.atlas.cogentco.com (154.54.7.210) 86.064 ms 87.658 ms 84.452 ms
13
te8-3.ccr02.iad01.atlas.cogentco.com (154.54.26.134) 77.091 ms
te4-3.ccr02.iad01.atlas.cogentco.com (154.54.26.138) 76.536 ms
te8-3.ccr02.iad01.atlas.cogentco.com (154.54.26.134) 76.592 ms
14
ntelos-network-inc.demarc.cogentco.com (38.104.56.130) 77.014 ms 76.033 ms 76.479
ms
15 * * *
16 64.4.117.198 (64.4.117.198) 85.836 ms 70.351 ms 74.452 ms
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
zooty> nslookup
mirror.liberty.edu 68.87.68.162
Server: 68.87.68.162
Address: 68.87.68.162#53
Non-authoritative answer:
Name:
mirror.liberty.edu
Address: 208.95.50.144
I pointed that last nslookup directly at the primary comcast
server rather than my own cacheing server just to make sure
I got the same answer.