<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div><div><div>Thanks Alex,</div><div><br></div><div>I’ll add to ticket.</div><div><br></div><div><p class="MsoNormal" style="font-size: 14px;"><span lang="EN-US">Nick.<o:p></o:p></span></p><p class="MsoNormal" style="font-size: 14px;"><span lang="EN-US"> </span></p><p class="MsoNormal" style="font-size: 14px;"><span lang="EN-US">-------------------------------------------------------<o:p></o:p></span></p><p class="MsoNormal" style="font-size: 14px;"><span lang="EN-US">Nick Savvides, </span>Senior Principal Systems Engineer (Security)</p><p class="MsoNormal" style="font-size: 14px;"><span lang="EN-US"><span style="color: blue; "><a href="mailto:nick_savvides@symantec.com">nick_savvides@symantec.com</a>, </span></span>Mobile: +61 434 600 870</p><p class="MsoNormal" style="font-size: 14px;">Please sponsor me in the 200km charity Ride To Conquer Cancer <span style="font-family: Helvetica; font-size: 12px;"><a href="http://ml14.conquercancer.org.au/site/TR/Events/Melbourne2014?px=1282304&pg=personal&fr_id=1141">http://ml14.conquercancer.org.au/site/TR/Events/Melbourne2014?px=1282304&pg=personal&fr_id=1141</a></span></p><p class="MsoNormal" style="font-size: 14px;"><span style="font-family: Helvetica; font-size: 12px;"><br></span></p></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Alex Samad - Yieldbroker <<a href="mailto:Alex.Samad@yieldbroker.com">Alex.Samad@yieldbroker.com</a>><br><span style="font-weight:bold">Date: </span> Wednesday, 30 July 2014 14:30 <br><span style="font-weight:bold">To: </span> "<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br><span style="font-weight:bold">Subject: </span> Re: [AusNOG] issues connecting to verisign.com.au<br></div><div><br></div><div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1625648029;
mso-list-type:hybrid;
mso-list-template-ids:-975435726 -1411219632 201916419 201916421 201916417 201916419 201916421 201916417 201916419 201916421;}
@list l0:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div lang="EN-AU" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Hi<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">All solved<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">2 things<o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 11pt; color: rgb(31, 73, 125);"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Seems like it was an issue with our main transit provider (single router takes out connectivity … for some reason can’t route around it ..)<o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 11pt; color: rgb(31, 73, 125);"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Also it seems like Verisign don’t allow you to ping these servers … all my tests on by backup links were with ping/tracert… bad assumption on my part
!<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Alex<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal"><b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif;"> Alex Samad - Yieldbroker
<br><b>Sent:</b> Wednesday, 30 July 2014 10:26 AM<br><b>To:</b> 'Joshua D'Alton'; Damien Gardner Jnr<br><b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> RE: [AusNOG] issues connecting to verisign.com.au<o:p></o:p></span></p></div></div><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Strange thing is one of our guys can get to the site on their phone via telstra.<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">A<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal"><b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif;"> Joshua D'Alton [<a href="mailto:joshua@railgun.com.au">mailto:joshua@railgun.com.au</a>]
<br><b>Sent:</b> Wednesday, 30 July 2014 10:24 AM<br><b>To:</b> Damien Gardner Jnr<br><b>Cc:</b> Alex Samad - Yieldbroker; <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] issues connecting to verisign.com.au<o:p></o:p></span></p></div></div><p class="MsoNormal"><o:p> </o:p></p><div><p class="MsoNormal">Same subnet still, so not a routing issue unless they are doing some very strange things on their side, I'd say it is the update as you listed + symantec firewall waiting on an update/refresh.<o:p></o:p></p></div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p><div><p class="MsoNormal">On Wed, Jul 30, 2014 at 10:19 AM, Damien Gardner Jnr <<a href="mailto:rendrag@rendrag.net" target="_blank">rendrag@rendrag.net</a>> wrote:<o:p></o:p></p><div><p class="MsoNormal">That's interesting, perhaps they're in the process of changing something, as I see
<a href="http://www.verisign.com.au" target="_blank">www.verisign.com.au</a> resolving to a different IP.. Hard to tell if they have just changed something, as they don't use the standard YYYYMMDDxx as their SOA serial :(<o:p></o:p></p><div><p class="MsoNormal"><o:p> </o:p></p></div><div><div><p class="MsoNormal">;; ANSWER SECTION:<o:p></o:p></p></div><div><p class="MsoNormal"><a href="http://www.verisign.com.au" target="_blank">www.verisign.com.au</a>. 3309 IN A
<a href="tel:202.65.27.182" target="_blank">202.65.27.182</a><o:p></o:p></p></div></div><div><div><p class="MsoNormal">;; ANSWER SECTION:<o:p></o:p></p></div><div><p class="MsoNormal"><a href="http://pki-admin.verisign.com.au" target="_blank">pki-admin.verisign.com.au</a>. 43 IN A
<a href="tel:202.65.27.171" target="_blank">202.65.27.171</a><o:p></o:p></p></div></div></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p><div><p class="MsoNormal">On 30 July 2014 10:13, Joshua D'Alton <<a href="mailto:joshua@railgun.com.au" target="_blank">joshua@railgun.com.au</a>> wrote:<o:p></o:p></p><div><p class="MsoNormal">CAN browse to <a href="http://www.verisign.com.au/" target="_blank">
http://www.verisign.com.au/</a> but not <a href="http://pki-admin.verisign.com.au/" target="_blank"><span style="font-size: 10pt; font-family: Arial, sans-serif;">pki-admin.verisign.com.au</span></a><span style="font-family: Arial, sans-serif;"> but
the traceroutes are the same (obviously, same resolved IP <a href="tel:202.65.27.171" target="_blank">202.65.27.171</a>)</span><o:p></o:p></p><div><p class="MsoNormal"><o:p> </o:p></p></div><div><div><p class="MsoNormal">Router: Sydney <o:p></o:p></p></div><div><p class="MsoNormal">Command: traceroute <a href="tel:202.65.27.171" target="_blank">
202.65.27.171</a><o:p></o:p></p></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><p class="MsoNormal">traceroute to <a href="tel:202.65.27.171" target="_blank">202.65.27.171</a><a href="tel:%28202.65.27.171" target="_blank">(202.65.27.171</a>), 30 hops max, 60 byte packets<o:p></o:p></p></div><div><p class="MsoNormal"> 1 <a href="http://vlan151.fwl01.syd04.nsw.vocus.net.au" target="_blank">vlan151.fwl01.syd04.nsw.vocus.net.au</a> (175.45.91.194) 0.342 ms 0.281 ms 0.284 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 2 <a href="http://ge-0-0-2-910.bdr02.syd04.nsw.VOCUS.net.au" target="_blank">ge-0-0-2-910.bdr02.syd04.nsw.VOCUS.net.au</a> (175.45.72.85) 0.336 ms 0.329 ms 0.431 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 3 <a href="http://ge-0-5-0-2.cor01.syd04.nsw.VOCUS.net.au" target="_blank">ge-0-5-0-2.cor01.syd04.nsw.VOCUS.net.au</a> (175.45.72.81) 0.931 ms 0.927 ms 1.063 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 4 <a href="http://ten-0-1-0.bdr03.syd03.nsw.VOCUS.net.au" target="_blank">ten-0-1-0.bdr03.syd03.nsw.VOCUS.net.au</a> (114.31.192.35) 0.675 ms 0.796 ms 0.655 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 5 <a href="http://p10026.syd.equinix.com" target="_blank">p10026.syd.equinix.com</a> (202.167.228.44) 0.782 ms 0.781 ms 0.771 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 6 <a href="http://gi4-0-0.gw1.syd5.asianetcom.net" target="_blank">gi4-0-0.gw1.syd5.asianetcom.net</a> (202.147.55.96) 1.749 ms 1.770 ms 1.875 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 7 <a href="http://gi2-0-0.gw1.mel4.asianetcom.net" target="_blank">gi2-0-0.gw1.mel4.asianetcom.net</a> (202.147.42.201) 15.128 ms 14.076 ms 14.060 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 8 <a href="http://VSN-0003.gw1.mel1.asianetcom.net" target="_blank">VSN-0003.gw1.mel1.asianetcom.net</a> (203.192.130.150) 17.765 ms 17.765 ms 17.759 ms<o:p></o:p></p></div><div><p class="MsoNormal"> 9 202.65.21.202 (202.65.21.202) 15.810 ms !X * *<o:p></o:p></p></div></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><div><p class="MsoNormal">Router: Sydney <o:p></o:p></p></div><div><p class="MsoNormal">Command: show ip bgp <a href="tel:202.65.27.171" target="_blank">
202.65.27.171</a><o:p></o:p></p></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><p class="MsoNormal">BGP routing table entry for <a href="http://202.65.27.0/24" target="_blank">
202.65.27.0/24</a><o:p></o:p></p></div><div><p class="MsoNormal">Paths: (1 available, best #1, table Default-IP-Routing-Table)<o:p></o:p></p></div><div><p class="MsoNormal"> Not advertised to any peer<o:p></o:p></p></div><div><p class="MsoNormal"> 10026 17812 17812 17812 17812 64001<o:p></o:p></p></div><div><p class="MsoNormal"> 114.31.192.11 from 175.45.72.8 (114.31.192.11)<o:p></o:p></p></div><div><p class="MsoNormal"> Origin incomplete, metric 0, localpref 320, valid, internal, best<o:p></o:p></p></div><div><p class="MsoNormal"> Community: 4826:5203 (NSW site 3) 4826:6500<o:p></o:p></p></div><div><p class="MsoNormal"> Originator: 114.31.192.11, Cluster list: 175.45.72.8 114.31.192.21 <o:p></o:p></p></div><div><p class="MsoNormal"> Last update: Tue Jul 29 18:34:26 2014<o:p></o:p></p></div></div><div><p class="MsoNormal"><o:p> </o:p></p></div><div><p class="MsoNormal">Probably raise it with verisign, or symantec/AS17812 maybe a firewall issue if they using symantec firewall product?<o:p></o:p></p></div></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p><div><p class="MsoNormal">On Wed, Jul 30, 2014 at 9:53 AM, Alex Samad - Yieldbroker <<a href="mailto:Alex.Samad@yieldbroker.com" target="_blank">Alex.Samad@yieldbroker.com</a>> wrote:<o:p></o:p></p><p class="MsoNormal">Hi<br><br>
Wondering if anyone else if having issues with <a href="tel:202.65.27.171" target="_blank">202.65.27.171</a> (<a href="http://pki-admin.verisign.com.au" target="_blank">pki-admin.verisign.com.au</a>)<br><br><br>
2. 202.74.32.66 0.0% 46 0.6 0.6 0.5 0.9 0.1<br>
3. 203.161.153.217 0.0% 46 0.9 7.9 0.8 114.5 20.8<br>
4. 121.101.138.212 0.0% 46 10.2 10.4 10.2 12.0 0.3<br>
5. 121.101.138.171 0.0% 46 49.1 12.1 10.2 53.3 8.4<br>
6. 121.101.138.205 0.0% 46 10.3 12.6 10.3 62.5 9.9<br>
7. ???<br><br>
I tried this on pipe and vocus and internode, but it seems to be available via Vodafone ??<br><br>
A<br>
_______________________________________________<br>
AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></div><p class="MsoNormal"><o:p> </o:p></p></div></div></div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></div><p class="MsoNormal"><br><br clear="all"><o:p></o:p></p><div><p class="MsoNormal"><o:p> </o:p></p></div></div></div><p class="MsoNormal"><span class="hoenzb"><span style="color:#888888">-- <o:p></o:p></span></span></p><div><p><span style="color:#888888">Damien Gardner Jnr<br>
VK2TDG. Dip EE. GradIEAust<br><a href="mailto:rendrag@rendrag.net" target="_blank">rendrag@rendrag.net</a> - <a href="http://www.rendrag.net/" target="_blank">http://www.rendrag.net/</a><u><br></u>--<br>
We rode on the winds of the rising storm,<br>
We ran to the sounds of thunder.<br>
We danced among the lightning bolts,<br>
and tore the world asunder</span><o:p></o:p></p></div></div></div><p class="MsoNormal"><o:p> </o:p></p></div></div></div></div></div></div></span></body></html>