For the IT gurus [Network routing issue to AFF]

[jb747]

Over the last couple of days I've had an odd issue accessing this forum from any computer at home. If I enter any australianfrequentflyer address, the browser stalls, and never loads the page. If I use a foreign VPN I get access, but if I use an Australian VPN server I end up stalled as well.

It happens on all of my devices, and does not seem affected by a change of DNS server.

Thoughts?

 

[AisleSeat]

Are you accessing the site solely through a VPN? Does it load without? Is it only AFF that's affected?

 

[jb747]

It's the only site that seems to be affected. No access if I don't use the VPN, or if the VPN is an Australian site. Any overseas VPN and it works?

 

[AisleSeat]

Weird. A VPN should circumvent any blocks an ISP has put on IP or DNS. However, its also entirely possible the ISP is blocking the PPTP port itself used by the Aus VPN company, seeing as how foreign VPNs work.

Who's your ISP?

 

[jb747]

Weird. A VPN should circumvent any blocks an ISP has put on IP or DNS. However, its also entirely possible the ISP is blocking the PPTP port itself used by the Aus VPN company, seeing as how foreign VPNs work.

We've just had a look. It's every device in the house, if it is going through the NBN...aussiebroadband. It's ok on 4G. It doesn't matter what DNS server I use, on the device and/or the router.

I can get to any VPN I want, but I can only get to this site if I don't use an Australian access point.

 

[kevrosmith]

Perhaps AJ is grounding the fleet again and has asked Admin to block your access

 

[jb747]

Perhaps AJ is grounding the fleet again and has asked Admin to block your access

IT are very successful at that, and don't need any prompting from AJ. Being locked out is pretty much the norm.

They recently added two factor identification to our rostering system, and successfully locked everyone out. Of course, it worked if you were on an internal connection, but none of us ever are.

 

[drron]

It just might be ABB.I am not locked out but every couple of days get the cannot access this site.but just hitting refresh gets it to work.

 

[Daver6]

Depending on your computer, either open a Command window (Windows) or Terminal (on a Mac). Run the following command and paste the results. If you can do this when both connected via your NBN and again when connected via a working VPN and/or mobile data connection.

nslookup www.australianfrequentflyer.com.au

 

[jb747]

Last login: Sat Jun 2 14:47:52 on console

iMac-Pro:~ jb$ nslookup www.australianfrequentflyer.com.au
Server: 209.222.18.222
Address: 209.222.18.222#53


Non-authoritative answer:
www.australianfrequentflyer.com.au canonical name = australianfrequentflyer.com.au.
Name: australianfrequentflyer.com.au
Address: 192.69.193.66


iMac-Pro:~ jb$ nslookup www.australianfrequentflyer.com.au
Server: 1.1.1.1
Address: 1.1.1.1#53

Non-authoritative answer:
www.australianfrequentflyer.com.au canonical name = australianfrequentflyer.com.au.
Name: australianfrequentflyer.com.au
Address: 192.69.193.66

If I input the address, then with the VPN it gives a certificate warning, but will allow access. Without the VPN, no change, just doesn't load.

 

[Daver6]

The certificate warning is to be expected if you input the IP address.

Can you run the following command now from the Terminal window in both scenarios and paste the results?

traceroute www.australianfrequentflyer.com.au

 

[jb747]

Last login: Fri Jun 22 11:15:37 on ttys000
iMac-Pro:~ jb$ traceroute www.australianfrequentflyer.com.au
traceroute to australianfrequentflyer.com.au (192.69.193.66), 64 hops max, 52 byte packets
1 10.7.10.1 (10.7.10.1) 218.009 ms 217.450 ms 217.195 ms
2 vl199-br1-cer.sjc1.choopa.net (104.156.228.65) 217.962 ms 217.709 ms 218.124 ms
3 * * *
4 he.net.any2ix.coresite.com (206.51.41.21) 218.024 ms 217.827 ms 217.742 ms
5 100ge1-1.core1.sjc2.he.net (184.105.65.114) 217.992 ms 237.025 ms
10ge14-4.core1.pao1.he.net (72.52.92.113) 218.309 ms
6 100ge1-1.core1.pao1.he.net (72.52.92.158) 218.681 ms
10ge4-5.core1.pao1.he.net (72.52.92.69) 218.631 ms
100ge1-1.core1.pao1.he.net (72.52.92.158) 218.595 ms
7 webnx-inc.10gigabitethernet6-16.core1.lax2.he.net (64.62.182.134) 227.742 ms
100ge7-1.core1.lax2.he.net (184.105.81.238) 226.452 ms 226.761 ms
8 216-158-65-145.static.webnx.com (216.158.65.145) 226.725 ms
webnx-inc.10gigabitethernet6-16.core1.lax2.he.net (64.62.182.134) 227.911 ms 228.757 ms
9 216-158-65-145.static.webnx.com (216.158.65.145) 227.334 ms
server1.australianfrequentflyer.com.au (192.69.193.66) 225.878 ms
216-158-65-145.static.webnx.com (216.158.65.145) 228.075 ms

iMac-Pro:~ jb$ traceroute www.australianfrequentflyer.com.au
traceroute to australianfrequentflyer.com.au (192.69.193.66), 64 hops max, 52 byte packets
1 192.168.178.1 (192.168.178.1) 0.717 ms 0.400 ms 0.400 ms
2 loop1801501200.bng1.mel.aussiebb.net (180.150.120.1) 19.175 ms 19.007 ms 19.366 ms
3 as6939.melbourne.megaport.com (103.26.71.122) 30.067 ms 29.771 ms 29.915 ms
4 10ge3-5.core1.sjc1.he.net (184.105.222.85) 175.591 ms 175.359 ms 175.530 ms
5 10ge7-2.core1.sjc2.he.net (72.52.92.118) 175.728 ms 176.113 ms
100ge1-1.core1.sjc2.he.net (184.105.65.114) 175.397 ms
6 100ge1-1.core1.pao1.he.net (72.52.92.158) 176.143 ms
100ge7-1.core1.lax2.he.net (184.105.81.238) 183.782 ms
100ge1-1.core1.pao1.he.net (72.52.92.158) 176.572 ms
7 100ge7-1.core1.lax2.he.net (184.105.81.238) 184.247 ms 188.105 ms *
8 * * *
9 * * *
10 * * *
continues until
64 * * *
iMac-Pro:~ jb$

That took a while....

 

[Flying_man]

I don’t know

 

[Daver6]

That took a while....

Ok. So the first is from your place in Victoria. Interesting it seems to drop out in the US. This is beyond my networking skills. I was hoping for something more obvious/simpler.

Potentially query your NBN provider on this, but I don't think the problem is with them either.

Sorry I can't be more helpful

 

[cwd]

Over the last couple of days I've had an odd issue accessing this forum from any computer at home. If I enter any australianfrequentflyer address, the browser stalls, and never loads the page. If I use a foreign VPN I get access, but if I use an Australian VPN server I end up stalled as well.

It happens on all of my devices, and does not seem affected by a change of DNS server.

Thoughts?

I have the same issue, and am with the same ISP. Interestingly from another service on the same ISP in the same state it works ok, so I suspect it's a particular IP range whose routing isn't working. I'm going to raise a support ticket with ABB.

 

[cwd]

The issue is that packets aren't making it from the ISP to the AFF server and back. I've checked from two connections and the name resolves to the same IP on both but this IP is only reachable from one.

My guess is there's something funny going on with this IP range of the ISP's routing advertisement to an upstream ISP. I've raised a support ticket to see if they can do anything about it.

 

[mjt57]

I too, am with Aussie Broadband. Same thing as JB. But it’s also happening to other websites, one of them a motorbike forum called Netrider.

I don’t run any VPNs.

As I type this I’m on my iPad, disconnected from wifi on Telstra 4G.

 

[Ewing]

How odd.

I'm on Aussie Broadband and have no issues accessing AFF. Trace looks fine:

traceroute to www.australianfrequentflyer.com.au (192.69.193.66), 30 hops max, 60 byte packets
 1  172.31.0.1 (172.31.0.1)  0.505 ms  0.497 ms  0.490 ms
 2  loop2021532100.bng1.syd.aussiebb.net (202.153.210.1)  1.509 ms  1.989 ms  1.990 ms
 3  119-18-32-253.cust.aussiebb.net (119.18.32.253)  13.707 ms  13.711 ms  14.673 ms
 4  119-18-32-141.cust.aussiebb.net (119.18.32.141)  14.785 ms  14.786 ms  14.713 ms
 5  * * *
 6  10ge3-5.core1.sjc1.he.net (184.105.222.85)  164.889 ms  163.511 ms  163.537 ms
 7  100ge1-1.core1.sjc2.he.net (184.105.65.114)  163.497 ms 10ge14-4.core1.pao1.he.net (72.52.92.113)  164.153 ms 10ge7-2.core1.sjc2.he.net (72.52.92.118)  163.843 ms
 8  100ge8-2.core1.lax1.he.net (184.105.223.250)  164.121 ms 100ge7-1.core1.lax2.he.net (184.105.81.238)  164.513 ms 10ge4-5.core1.pao1.he.net (72.52.92.69)  165.325 ms
 9  100ge7-1.core1.lax2.he.net (184.105.81.238)  164.578 ms webnx-inc.10gigabitethernet6-16.core1.lax2.he.net (64.62.182.134)  164.913 ms 100ge7-1.core1.lax2.he.net (184.105.81.238)  164.638 ms
10  216-158-65-145.static.webnx.com (216.158.65.145)  165.556 ms webnx-inc.10gigabitethernet6-16.core1.lax2.he.net (64.62.182.134)  164.538 ms  164.457 ms
11  server1.australianfrequentflyer.com.au (192.69.193.66)  164.078 ms  164.079 ms 216-158-65-145.static.webnx.com (216.158.65.145)  165.625 ms

What type of technology? I'm on NBN FTTP.

 

[jb747]

NBN, FTTN.

It's only started doing it in the last couple of days.

 

[admin]

Unfortunately there is nothing I can add, other than saying that nothing has changed on our technical environment over the last few days which would cause this problem. I suspect it's an ISP issue.

I do recall many years ago, I couldn't access AFF from my home ADSL connection (TPG) but could from my mobile. I contacted TPG and for some reason TPG were blocking a range of IPs, including AFF. Once identified, the problem was sorted quickly.

Wish I could be more helpful!