Which cvsup server?

Brian Somers brian at awfulhak.org
Thu Jan 18 00:53:21 GMT 2001


Well, something's blocking traffic.  I suggest you open everything up 
and figure out what ports cvsup uses.

Personally, I permit all established tcp connections and permit 
outgoing connections from ports >1024....

> Brian Somers wrote:
> 
> >cvsup2.uk.FreeBSD.org never heard of you :-/
> 
> Strange.  Thanks for checking though.
> 
> >You probably need
> >   set filter in  7 permit tcp src eq 5998
> >   set filter in  8 permit tcp src eq 5999
> >   set filter out 7 permit tcp dst eq 5998
> >   set filter out 8 permit tcp dst eq 5999
> 
> Ok, changed to exactly those and removed the -P m option.
> 
> I've tried again with tcpdump running via 3 ISPs:
> 
> tcpdump: listening on tun0 (My preferred ISP)
> 13:30:40.623688 195.110.170.155.1027 > 195.110.160.1.53:  59801+ A? cvsup2.uk.FreeBSD.org. (39)
> 13:30:40.813411 195.110.160.1.53 > 195.110.170.155.1027:  59801 2/3/3 CNAME storm.freebs (203)
> 13:30:40.814281 195.110.170.155.1027 > 194.242.139.170.5999: S 113794168:113794168(0) win 16384 <mss 1560> (DF)
> 13:30:43.813189 195.110.170.155.1027 > 194.242.139.170.5999: S 113794168:113794168(0) win 16384 <mss 1560> (DF)
> 13:30:49.813267 195.110.170.155.1027 > 194.242.139.170.5999: S 113794168:113794168(0) win 16384 <mss 1560> (DF)
> 13:31:01.813449 195.110.170.155.1027 > 194.242.139.170.5999: S 113794168:113794168(0) win 16384 <mss 1560> (DF)
> 13:31:25.813824 195.110.170.155.1027 > 194.242.139.170.5999: S 113794168:113794168(0) win 16384 <mss 1560> (DF)
> 
> tcpdump: listening on tun0 (WorldOnline)
> 13:55:24.618274 62.64.182.214.1031 > 195.110.160.1.53:  65215+ A? cvsup2.uk.FreeBSD.org. (39)
> 13:55:24.775868 195.110.160.1.53 > 62.64.182.214.1031:  65215 2/3/3 CNAME storm.freebs (203)
> 13:55:24.776741 62.64.182.214.1033 > 194.242.139.170.5999: S 396520952:396520952(0) win 16384 <mss 1460> (DF)
> 13:55:27.775575 62.64.182.214.1033 > 194.242.139.170.5999: S 396520952:396520952(0) win 16384 <mss 1460> (DF)
> 13:55:33.775657 62.64.182.214.1033 > 194.242.139.170.5999: S 396520952:396520952(0) win 16384 <mss 1460> (DF)
> 13:55:45.775838 62.64.182.214.1033 > 194.242.139.170.5999: S 396520952:396520952(0) win 16384 <mss 1460> (DF)
> 
> tcpdump: listening on tun0 (Freeserve)
> 14:02:59.416289 62.136.16.135.1032 > 195.110.160.1.53:  57911+ A? cvsup2.uk.FreeBSD.org. (39)
> 14:02:59.602708 195.110.160.1.53 > 62.136.16.135.1032:  57911 2/3/3 CNAME storm.freebs (203)
> 14:02:59.603600 62.136.16.135.1034 > 194.242.139.170.5999: S 483549658:483549658(0) win 16384 <mss 1460> (DF)
> 14:03:02.602433 62.136.16.135.1034 > 194.242.139.170.5999: S 483549658:483549658(0) win 16384 <mss 1460> (DF)
> 14:03:08.602522 62.136.16.135.1034 > 194.242.139.170.5999: S 483549658:483549658(0) win 16384 <mss 1460> (DF)
> 14:03:20.602697 62.136.16.135.1034 > 194.242.139.170.5999: S 483549658:483549658(0) win 16384 <mss 1460> (DF)
> 
> Which just proves (to me) that packets go out, but nothing comes back :(
> 
> Anything else I could try?
> 
> John.
> 

-- 
Brian <brian at Awfulhak.org>                        <brian@[uk.]FreeBSD.org>
      <http://www.Awfulhak.org>                   <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !






More information about the Ukfreebsd mailing list