[AusNOG] issues connecting to verisign.com.au

[Nick Savvides]

They are unrelated hosts and will always resolve to different IPs.

One is the Australian corporate website (browsable), the other is a customer
portal (not browsable unless you present a client certificate) for Managed
PKI.

No changes are currently in play. No issues reported system side. I’ll check
with support.

Nick.
 
-------------------------------------------------------
Nick Savvides,  Senior Principal Systems Engineer (Security)
nick_savvides at symantec.com, Mobile: +61 434 600 870
Please sponsor me in the 200km charity Ride To Conquer Cancer
http://ml14.conquercancer.org.au/site/TR/Events/Melbourne2014?px=1282304&pg=
personal&fr_id=1141


From:  Damien Gardner Jnr <rendrag at rendrag.net>
Date:  Wednesday, 30 July 2014 10:19
To:  Joshua D'Alton <joshua at railgun.com.au>
Cc:  "ausnog at lists.ausnog.net" <ausnog at lists.ausnog.net>
Subject:  Re: [AusNOG] issues connecting to verisign.com.au

That's interesting, perhaps they're in the process of changing something, as
I see www.verisign.com.au <http://www.verisign.com.au>  resolving to a
different IP..  Hard to tell if they have just changed something, as they
don't use the standard YYYYMMDDxx as their SOA serial :(

;; ANSWER SECTION:
www.verisign.com.au <http://www.verisign.com.au> . 3309 IN A 202.65.27.182
;; ANSWER SECTION:
pki-admin.verisign.com.au <http://pki-admin.verisign.com.au> . 43 IN A
202.65.27.171


On 30 July 2014 10:13, Joshua D'Alton <joshua at railgun.com.au> wrote:
> CAN browse to http://www.verisign.com.au/   but not  pki-admin.verisign.com.au
> <http://pki-admin.verisign.com.au/>     but the traceroutes are the same
> (obviously, same resolved IP 202.65.27.171 <tel:202.65.27.171> )
> 
> Router: Sydney 
> Command: traceroute 202.65.27.171 <tel:202.65.27.171>
> 
> 
> traceroute to 202.65.27.171 <tel:202.65.27.171>  (202.65.27.171
> <tel:%28202.65.27.171> ), 30 hops max, 60 byte packets
>  1  vlan151.fwl01.syd04.nsw.vocus.net.au
> <http://vlan151.fwl01.syd04.nsw.vocus.net.au>  (175.45.91.194)  0.342 ms
> 0.281 ms  0.284 ms
>  2  ge-0-0-2-910.bdr02.syd04.nsw.VOCUS.net.au
> <http://ge-0-0-2-910.bdr02.syd04.nsw.VOCUS.net.au>  (175.45.72.85)  0.336 ms
> 0.329 ms  0.431 ms
>  3  ge-0-5-0-2.cor01.syd04.nsw.VOCUS.net.au
> <http://ge-0-5-0-2.cor01.syd04.nsw.VOCUS.net.au>  (175.45.72.81)  0.931 ms
> 0.927 ms  1.063 ms
>  4  ten-0-1-0.bdr03.syd03.nsw.VOCUS.net.au
> <http://ten-0-1-0.bdr03.syd03.nsw.VOCUS.net.au>  (114.31.192.35)  0.675 ms
> 0.796 ms  0.655 ms
>  5  p10026.syd.equinix.com <http://p10026.syd.equinix.com>  (202.167.228.44)
> 0.782 ms  0.781 ms  0.771 ms
>  6  gi4-0-0.gw1.syd5.asianetcom.net <http://gi4-0-0.gw1.syd5.asianetcom.net>
> (202.147.55.96)  1.749 ms  1.770 ms  1.875 ms
>  7  gi2-0-0.gw1.mel4.asianetcom.net <http://gi2-0-0.gw1.mel4.asianetcom.net>
> (202.147.42.201)  15.128 ms  14.076 ms  14.060 ms
>  8  VSN-0003.gw1.mel1.asianetcom.net <http://VSN-0003.gw1.mel1.asianetcom.net>
> (203.192.130.150)  17.765 ms  17.765 ms  17.759 ms
>  9  202.65.21.202 (202.65.21.202)  15.810 ms !X * *
> 
> Router: Sydney 
> Command: show ip bgp 202.65.27.171 <tel:202.65.27.171>
> 
> 
> BGP routing table entry for 202.65.27.0/24 <http://202.65.27.0/24>
> Paths: (1 available, best #1, table Default-IP-Routing-Table)
>   Not advertised to any peer
>   10026 17812 17812 17812 17812 64001
>     114.31.192.11 from 175.45.72.8 (114.31.192.11)
>       Origin incomplete, metric 0, localpref 320, valid, internal, best
>       Community: 4826:5203 (NSW site 3) 4826:6500
>       Originator: 114.31.192.11, Cluster list: 175.45.72.8 114.31.192.21
>       Last update: Tue Jul 29 18:34:26 2014
> 
> Probably raise it with verisign, or symantec/AS17812   maybe a firewall issue
> if they using symantec firewall product?
> 
> 
> On Wed, Jul 30, 2014 at 9:53 AM, Alex Samad - Yieldbroker
> <Alex.Samad at yieldbroker.com> wrote:
>> Hi
>> 
>> Wondering if anyone else if having issues with  202.65.27.171
>> <tel:202.65.27.171>  (pki-admin.verisign.com.au
>> <http://pki-admin.verisign.com.au> )
>> 
>> 
>> 2. 202.74.32.66 
>> 0.0%    46    0.6   0.6   0.5   0.9   0.1
>>  3. 203.161.153.217
>> 0.0%    46    0.9   7.9   0.8 114.5  20.8
>>  4. 121.101.138.212
>> 0.0%    46   10.2  10.4  10.2  12.0   0.3
>>  5. 121.101.138.171
>> 0.0%    46   49.1  12.1  10.2  53.3   8.4
>>  6. 121.101.138.205
>> 0.0%    46   10.3  12.6  10.3  62.5   9.9
>>  7. ???
>> 
>> I tried this on pipe and vocus and internode, but it seems to be available
>> via Vodafone ??
>> 
>> A
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> 



-- 
Damien Gardner Jnr
VK2TDG. Dip EE. GradIEAust
rendrag at rendrag.net -  http://www.rendrag.net/
--
We rode on the winds of the rising storm,
 We ran to the sounds of thunder.
We danced among the lightning bolts,
 and tore the world asunder


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140730/60430420/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5192 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140730/60430420/attachment.bin>