[AusNOG] PIPE / TPG blocking IPs

[Nathan Brookfield]

http://looking-glass.tpgi.com.au/

Sydney>ping 67.228.195.118

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 67.228.195.118, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 248/286/436 ms
Sydney>

Weird!

Kindest Regards,
Nathan Brookfield (VK2NAB)

Chief Executive Officer
Simtronic Technologies Pty Ltd

Local: (02) 4749 4949 | Fax: (02) 4749 4950 | Direct: (02) 4749 4951
Web: http://www.simtronic.com.au<http://www.simtronic.com.au/> | E-mail: nathan.brookfield at simtronic.com.au<mailto:nathan.brookfield at simtronic.com.au>

[Untitled]

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Brenden
Sent: Wednesday, 2 July 2014 12:51 PM
To: ausnog at lists.ausnog.net
Subject: [AusNOG] PIPE / TPG blocking IPs

Just wondering if anyone knows why PIPE / TPG would block a single IP, on the Sydney side of their network??

We have a server at Softlayer with a range of IPs. For example 67.228.195.118 is blocked (routing loop by the looks).

Other IPs in the range are working fine (e.g .120)...

The PIPE Networks NOC is giving us the run around (the issue originally come about because we couldn't reach the US server from our PIPE transit, now we're getting reports from TPG consumer customers they can't access the IP either)

For example: 67.228.195.118

# ping 67.228.195.118
PING 67.228.195.118 (67.228.195.118) 56(84) bytes of data.
>From 202.7.166.137 icmp_seq=1 Time to live exceeded
>From 202.7.166.137 icmp_seq=2 Time to live exceeded
>From 202.7.166.137 icmp_seq=3 Time to live exceeded
>From 202.7.166.137 icmp_seq=4 Time to live exceeded

Traceroute:
  1 eth1-1.rq-127creek-cer-01.tpg-telecom.net (121.101.138.72) 0 msec 0 msec 4 msec
  2 ve100.rq-127creek-mlx-02.tpg-telecom.net (121.101.138.4) 16 msec 16 msec 16 msec
  3 eth6-2.rq-148brunswick-mlx-01.tpg-telecom.net (121.101.138.111) 12 msec 12 msec 12 msec
  4 eth11-7.rn-400harris-mlx-03.tpg-telecom.net (121.101.138.166) 12 msec 12 msec 12 msec
  5 ve101.rn-400harris-cer-01.tpg-telecom.net (121.101.138.213) 12 msec 20 msec 12 msec
  6 ip-2-136-161-203.static.pipenetworks.com (203.161.136.2) 12 msec 12 msec 12 msec
  7 203-219-35-2.static.tpgi.com.au (203.219.35.2) [AS 7545] 12 msec 16 msec 12 msec
  8 syd-pow-cla-csw1-po-5.tpgi.com.au (202.7.162.146) [AS 7545] 12 msec 12 msec 16 msec
  9 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 12 msec 12 msec 12 msec
10 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 16 msec 12 msec 12 msec
11 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 12 msec 12 msec 12 msec
12 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 16 msec 12 msec 16 msec
13 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 12 msec 12 msec 16 msec
14 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 132 msec 12 msec 12 msec
15  *
    syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 12 msec 12 msec
16 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 16 msec 12 msec 16 msec
17 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 12 msec 12 msec 16 msec
18 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 12 msec *  12 msec
19 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 12 msec 12 msec 12 msec
20 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 16 msec 12 msec 12 msec
21 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 16 msec 12 msec *
 22 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 12 msec 16 msec 12 msec
23 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 12 msec 16 msec 12 msec
24 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 12 msec 16 msec 12 msec
25 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 16 msec 12 msec 16 msec
26 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 12 msec 12 msec 16 msec
27  *
    syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 12 msec 12 msec
28 syd-pow-cla-crt1-ge2-2-2.tpgi.com.au (202.7.171.53) [AS 7545] 12 msec 16 msec 12 msec
29 syd-pow-cla-csw2-po-5.tpgi.com.au (202.7.162.14) [AS 7545] 12 msec 12 msec 12 msec
30 syd-pow-cf-i.tpgi.com.au (202.7.166.137) [AS 7545] 16 msec *  20 msec


The next IP 67.228.195.120 (same server at Softlayer)
# ping 67.228.195.120
PING 67.228.195.120 (67.228.195.120) 56(84) bytes of data.
64 bytes from 67.228.195.120: icmp_seq=1 ttl=50 time=177 ms
64 bytes from 67.228.195.120: icmp_seq=2 ttl=50 time=177 ms
64 bytes from 67.228.195.120: icmp_seq=3 ttl=50 time=177 ms

  1 eth1-1.rq-127creek-cer-01.tpg-telecom.net (121.101.138.72) 4 msec 0 msec 0 msec
  2 ve100.rq-127creek-mlx-02.tpg-telecom.net (121.101.138.4) 12 msec 12 msec 12 msec
  3 eth6-2.rq-148brunswick-mlx-01.tpg-telecom.net (121.101.138.111) 12 msec 12 msec 12 msec
  4 eth11-7.rn-400harris-mlx-03.tpg-telecom.net (121.101.138.166) 12 msec 12 msec 12 msec
  5 ve101.rn-400harris-cer-01.tpg-telecom.net (121.101.138.213) 16 msec 12 msec 16 msec
  6 ip-2-136-161-203.static.pipenetworks.com (203.161.136.2) 12 msec 12 msec 16 msec
  7 203-219-35-4.static.tpgi.com.au (203.219.35.4) [AS 7545] 16 msec 16 msec 16 msec
  8 10ge3-1.core1.sjc1.he.net (72.52.66.21) [AS 6939] 164 msec 160 msec 164 msec
  9 10ge2-1.core1.sjc2.he.net (72.52.92.118) [AS 6939] 160 msec 160 msec 164 msec
10 te1-7.bbr01.eq01.sjc01.networklayer.com (206.223.116.176) 160 msec 160 msec 160 msec
11 ae0.bbr02.wb01.sea02.networklayer.com (173.192.18.146) [AS 36351] 176 msec 180 msec 176 msec
12 ae1.dar02.sr01.sea01.networklayer.com (173.192.18.185) [AS 36351] 180 msec
    ae1.dar01.sr01.sea01.networklayer.com (173.192.18.143) [AS 36351] 180 msec
    ae1.dar02.sr01.sea01.networklayer.com (173.192.18.185) [AS 36351] 180 msec
13 po1.fcr01.sr01.sea01.networklayer.com (67.228.118.134) [AS 36351] 180 msec
    po2.fcr01.sr01.sea01.networklayer.com (67.228.118.138) [AS 36351] 180 msec
    po1.fcr01.sr01.sea01.networklayer.com (67.228.118.134) [AS 36351] 180 msec
14 67.228.195.120-static.reverse.softlayer.com (67.228.195.120) [AS 36351] 180 msec 176 msec 176 msec

Does anyone have any suggestions on how to figure out what's going on?

We're getting nowhere with PIPE.





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140702/4112f1bc/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6473 bytes
Desc: image001.png
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140702/4112f1bc/attachment-0001.png>