Обсуждение: [1/2 OFF] Varlena.com inaccessible from .br (Blocked?)

Hi!


I've always used General Bits from the Varlena website as a source of
information and recommended it for friends worldwide for better using
PostgreSQL.

There's been a while since I could use the website for the last time because
it looks like Brazilian networks are blocked somewhere after routers from
speakeasy.net (220.ge-3-0.er1.sfo1.speakeasy.net from this network where I am
now).

Is this blocking intentional?  Will it be suspended sometime in the near
future?  I'd really like to continue using it and recommending it, but I can't
proxy all the time or ssh to UNC all the time...

I even thought that the company (Varlena) had closed after trying from several
networks here in Brazil...  Today, as a last test, I decided using an account
at UNC to check it and to my surprise it did work...


Sorry for this off topic, but I don't have contacts there and I know that
people from there are subscribed here to this mailing list...



TIA,
--
Jorge Godoy      <jgodoy@gmail.com>

On Tue, Jan 16, 2007 at 19:47:28 -0200,
  Jorge Godoy <jgodoy@gmail.com> wrote:
>
> There's been a while since I could use the website for the last time because
> it looks like Brazilian networks are blocked somewhere after routers from
> speakeasy.net (220.ge-3-0.er1.sfo1.speakeasy.net from this network where I am
> now).
>
> Is this blocking intentional?  Will it be suspended sometime in the near
> future?  I'd really like to continue using it and recommending it, but I can't
> proxy all the time or ssh to UNC all the time...

I doubt Speakeasy is blocking anything. They are the ISP for geeks and say
up front that they don't block ports and the like.

Did you use traceroute or something similar to see how far the packets are
getting?
Be sure to check any fire wall rules you have.

Bruno Wolff III <bruno@wolff.to> writes:

> I doubt Speakeasy is blocking anything. They are the ISP for geeks and say
> up front that they don't block ports and the like.

There are ISPs here that say the same think except for the geek part and are
known to block several ports.

> Did you use traceroute or something similar to see how far the packets are
> getting?

The hostname was from the output of traceroute.

> Be sure to check any fire wall rules you have.

The don't block a host I used to access.  And not on several different
Brazilian networks from different carriers.  The traffic stops at speakeasy
from my house (ADSL from GVT, it also happens from Brasil Telecom and using
radio at the São Paulo state -- I'm in a different state, a partner lives in
São Paulo and tested it for me).


--
Jorge Godoy      <jgodoy@gmail.com>

On Wed, Jan 17, 2007 at 07:54:55 -0200,
  Jorge Godoy <jgodoy@gmail.com> wrote:
> Bruno Wolff III <bruno@wolff.to> writes:
>
> The don't block a host I used to access.  And not on several different
> Brazilian networks from different carriers.  The traffic stops at speakeasy
> from my house (ADSL from GVT, it also happens from Brasil Telecom and using
> radio at the São Paulo state -- I'm in a different state, a partner lives in
> São Paulo and tested it for me).

Be sure you aren't blocking the return traffic. I did that once using a /8
instead of a /16 and it took me a while to realize that the reason I stopped
getting back packets from a certain point on in the route was that I was
blocking the return packets, not that they weren't being sent.

You might also check to see if the ip address on your end was recently
allocated. They might block unallocated IP space (which is not something I
recommend) and be behind on updating the list of unallocated IP addresses.

wolff.to is on Speakeasy's network and you can try pinging it to see if it
is a general block. If you use traceroute, tell it to use icmp, not udp as
wolff.to will drop udp packets that aren't destined for a public service
or part of an existing conversation.

Bruno Wolff III <bruno@wolff.to> writes:

> Be sure you aren't blocking the return traffic. I did that once using a /8

As I said, just if I did that on several Brazilian networks.  There's no
blocking on any of these networks.

> You might also check to see if the ip address on your end was recently
> allocated. They might block unallocated IP space (which is not something I
> recommend) and be behind on updating the list of unallocated IP addresses.

None of these networks are recent.

> wolff.to is on Speakeasy's network and you can try pinging it to see if it

That website opens fine.

> is a general block. If you use traceroute, tell it to use icmp, not udp as
> wolff.to will drop udp packets that aren't destined for a public service
> or part of an existing conversation.

So, I believe that there might be something on Varlena's specific
configuration.


--
Jorge Godoy      <jgodoy@gmail.com>

Brazil has been trying to get its ISPs to block access to a certain
video.  I wonder if too wide a net was cast in that effort.

http://www.slate.com/id/2157399/?nav=navoa

On 1/17/07, Jorge Godoy <jgodoy@gmail.com> wrote:
> Bruno Wolff III <bruno@wolff.to> writes:
>
> > Be sure you aren't blocking the return traffic. I did that once using a /8
>
> As I said, just if I did that on several Brazilian networks.  There's no
> blocking on any of these networks.
>
> > You might also check to see if the ip address on your end was recently
> > allocated. They might block unallocated IP space (which is not something I
> > recommend) and be behind on updating the list of unallocated IP addresses.
>
> None of these networks are recent.
>
> > wolff.to is on Speakeasy's network and you can try pinging it to see if it
>
> That website opens fine.
>
> > is a general block. If you use traceroute, tell it to use icmp, not udp as
> > wolff.to will drop udp packets that aren't destined for a public service
> > or part of an existing conversation.
>
> So, I believe that there might be something on Varlena's specific
> configuration.
>
>
> --
> Jorge Godoy      <jgodoy@gmail.com>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: Have you checked our extensive FAQ?
>
>                http://www.postgresql.org/docs/faq
>

"Ian Harding" <harding.ian@gmail.com> writes:

> Brazil has been trying to get its ISPs to block access to a certain
> video.  I wonder if too wide a net was cast in that effort.
>
> http://www.slate.com/id/2157399/?nav=navoa

The problem is prior to that stupidity.  The block to the Cicarelli video was
removed, though.

--
Jorge Godoy      <jgodoy@gmail.com>

Ian Harding wrote:
> Brazil has been trying to get its ISPs to block access to a certain
> video.  I wonder if too wide a net was cast in that effort.
>
> http://www.slate.com/id/2157399/?nav=navoa

FWIW, I'm also blocked out of varlena.com and I'm not in Brazil, but in
Chile.

--
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

"Alejandro D. Burne" <alejandro.dburne@gmail.com> writes:

> Me too, from Argentina, may be don't like south america?

It looks to me like one of those stupid and indiscriminated blocks on 200/8
and 201/8 networks...  :-(

Anyway, I believe that now it is more than clear that there's nothing on my
networks and firewalls that is blocking Varlena on my side...  If anybody
could pass these messages to them, I believe that we (the blocked people)
would all be very grateful if we get to be able to access it again or just get
a notice that they'll block us forever and that's it.

--
Jorge Godoy      <jgodoy@gmail.com>

Is there still a problem here?  Does anyone know what the
problem was?  I have no trouble accessing varlena.com,
but I am not a good tester for that.

I was out of town during this thread but my machine did not
go down, but my isp could have.
You could have emailed me elein@varlena.com.

---elein
elein@varlena.com


On Thu, Jan 18, 2007 at 02:50:04PM -0200, Jorge Godoy wrote:
> "Alejandro D. Burne" <alejandro.dburne@gmail.com> writes:
>
> > Me too, from Argentina, may be don't like south america?
>
> It looks to me like one of those stupid and indiscriminated blocks on 200/8
> and 201/8 networks...  :-(
>
> Anyway, I believe that now it is more than clear that there's nothing on my
> networks and firewalls that is blocking Varlena on my side...  If anybody
> could pass these messages to them, I believe that we (the blocked people)
> would all be very grateful if we get to be able to access it again or just get
> a notice that they'll block us forever and that's it.
>
> --
> Jorge Godoy      <jgodoy@gmail.com>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: if posting/reading through Usenet, please send an appropriate
>        subscribe-nomail command to majordomo@postgresql.org so that your
>        message can get through to the mailing list cleanly
>

elein <elein@varlena.com> writes:

> Is there still a problem here?  Does anyone know what the
> problem was?  I have no trouble accessing varlena.com,
> but I am not a good tester for that.
>
> I was out of town during this thread but my machine did not
> go down, but my isp could have.
> You could have emailed me elein@varlena.com.
>
> ---elein
> elein@varlena.com

Hi Elein.


I hope this message gets to you.  The website is still unreachable from
Brazil.  It looks like there's something blocking South America somewhere on
your configurations.

When I tried accessing using an UNC account it worked perfectly, so it wasn't
a problem with the machine being down.

Could you check with your ISP if they're blocking us from down here? ;-)

--
Jorge Godoy      <jgodoy@gmail.com>

Jorge Godoy wrote:
> elein <elein@varlena.com> writes:
>
> > Is there still a problem here?  Does anyone know what the
> > problem was?  I have no trouble accessing varlena.com,
> > but I am not a good tester for that.
> >
> > I was out of town during this thread but my machine did not
> > go down, but my isp could have.
> > You could have emailed me elein@varlena.com.
> >
>
> I hope this message gets to you.  The website is still unreachable from
> Brazil.  It looks like there's something blocking South America somewhere on
> your configurations.
>
> When I tried accessing using an UNC account it worked perfectly, so it wasn't
> a problem with the machine being down.
>
> Could you check with your ISP if they're blocking us from down here? ;-)

They are certainly blocking some networks.  I have a report from a guy
in Venezuela which cannot access the site when connected via CANTV, but
can access it readily when using a different provider whose name escapes
me.

I am no longer blocked, but my IP address may have changed in the
interim (my provider has several very different blocks, not sure why).

--
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support

2007/1/23, Alvaro Herrera <alvherre@commandprompt.com>:
> Jorge Godoy wrote:
> > elein <elein@varlena.com> writes:
> >
> > > Is there still a problem here?  Does anyone know what the
> > > problem was?  I have no trouble accessing varlena.com,
> > > but I am not a good tester for that.
> > >
> > > I was out of town during this thread but my machine did not
> > > go down, but my isp could have.
> > > You could have emailed me elein@varlena.com.
> > >
> >
> > I hope this message gets to you.  The website is still unreachable from
> > Brazil.  It looks like there's something blocking South America somewhere on
> > your configurations.
> >
> > When I tried accessing using an UNC account it worked perfectly, so it wasn't
> > a problem with the machine being down.
> >
> > Could you check with your ISP if they're blocking us from down here? ;-)
>
> They are certainly blocking some networks.  I have a report from a guy
> in Venezuela which cannot access the site when connected via CANTV, but
> can access it readily when using a different provider whose name escapes
> me.

Right now I can access varlena.com from Brasília, Brazil, IP
200-140-160-96.bsace705.dsl.brasiltelecom.net.br

Regards,
--
Clodoaldo Pinto Neto