What is the proper mailing list for server issues?

classic Classic list List threaded Threaded
11 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

What is the proper mailing list for server issues?

Greywolf
Hello,

I am having a server issue that neither I nor my ISP seem to be able to
resolve with regards to connecting to Cygwin.com -- namely, only from my
house, I get a 403 Forbidden.

I've been round with my ISP and they are unable to reproduce the issue;
the response I get from here is "contact your ISP".  So who do I contact
about this?  Not being able to automagically fetch the mirror list is
annoying, and not being able to reach the site to see about updates and
such is similarly so.

Regards,

                                --*greywolf;


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

cyg Simple
On 4/21/2017 2:35 AM, Greywolf wrote:
> Hello,
>
> I am having a server issue that neither I nor my ISP seem to be able to
> resolve with regards to connecting to Cygwin.com -- namely, only from my
> house, I get a 403 Forbidden.
>

This is _your_ problem.  Something has caused you to not be able to
reach cygwin.com properly.  What IP address does cygwin.com resolve to?
Does using the IP address directly work for you?

$ ping cygwin.com

Pinging cygwin.com [209.132.180.131] with 32 bytes of data:


> I've been round with my ISP and they are unable to reproduce the issue;
> the response I get from here is "contact your ISP".  So who do I contact
> about this?  Not being able to automagically fetch the mirror list is
> annoying, and not being able to reach the site to see about updates and
> such is similarly so.
>

Understandable but nothing we can do from here.

--
cyg Simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Jon TURNEY
In reply to this post by Greywolf
On 21/04/2017 07:35, Greywolf wrote:

> Hello,
>
> I am having a server issue that neither I nor my ISP seem to be able to
> resolve with regards to connecting to Cygwin.com -- namely, only from my
> house, I get a 403 Forbidden.
>
> I've been round with my ISP and they are unable to reproduce the issue;
> the response I get from here is "contact your ISP".  So who do I contact
> about this?  Not being able to automagically fetch the mirror list is
> annoying, and not being able to reach the site to see about updates and
> such is similarly so.

You might try contacting the overseers list to ask if this is a problem
similar to [1].

[1] https://www.sourceware.org/ml/overseers/2016-q2/msg00019.html


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

RE: What is the proper mailing list for server issues?

Gluszczak, Glenn-2
In reply to this post by cyg Simple

Agree, it's nothing to do with Cygwin.com.

Check for a firewall on your local machine.  Check your home router to see if it has a firewall with restrictions.
Perhaps you're passing through a proxy server or firewall at the ISP?
Try traceroute or wget to analyze what site you're really attaching to.



On 4/21/2017 2:35 AM, Greywolf wrote:
> Hello,
>
> I am having a server issue that neither I nor my ISP seem to be able
> to resolve with regards to connecting to Cygwin.com -- namely, only
> from my house, I get a 403 Forbidden.
>

This is _your_ problem.  Something has caused you to not be able to reach cygwin.com properly.  What IP address does cygwin.com resolve to?
Does using the IP address directly work for you?

$ ping cygwin.com

Pinging cygwin.com [209.132.180.131] with 32 bytes of data:


> I've been round with my ISP and they are unable to reproduce the
> issue; the response I get from here is "contact your ISP".  So who do
> I contact about this?  Not being able to automagically fetch the
> mirror list is annoying, and not being able to reach the site to see
> about updates and such is similarly so.
>

Understandable but nothing we can do from here.

--
cyg Simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Erik Soderquist-2
In reply to this post by cyg Simple
On Fri, Apr 21, 2017 at 9:46 AM, cyg Simple <[hidden email]> wrote:
> On 4/21/2017 2:35 AM, Greywolf wrote:
>> I am having a server issue that neither I nor my ISP seem to be able to
>> resolve with regards to connecting to Cygwin.com -- namely, only from my
>> house, I get a 403 Forbidden.

if you try https rather than http, you should get a flag about a wrong
certificate if it is connecting to the wrong host (this sounds highly
likely).  perhaps the certificate information you get will show who
you are actually connecting to...?

>>
>
> This is _your_ problem.  Something has caused you to not be able to
> reach cygwin.com properly.  What IP address does cygwin.com resolve to?
> Does using the IP address directly work for you?
>
> $ ping cygwin.com
>
> Pinging cygwin.com [209.132.180.131] with 32 bytes of data:

I had similar problems and on watching packets with Wireshark, found
that _someone_ was hijacking DNS requests... I switched to dnscrypt
and have not had that problem since.

-- Erik

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Brian Inglis
In reply to this post by Gluszczak, Glenn-2
On 2017-04-21 09:06, Gluszczak, Glenn wrote:
> On 4/21/2017 2:35 AM, Greywolf wrote:
> Agree, it's nothing to do with Cygwin.com.
> Check for a firewall on your local machine. Check your home router to
> see if it has a firewall with restrictions.
> Perhaps you're passing through a proxy server or firewall at the ISP?
> Try traceroute or wget to analyze what site you're really attaching to.
>> I am having a server issue that neither I nor my ISP seem to be able
>> to resolve with regards to connecting to Cygwin.com -- namely, only
>> from my house, I get a 403 Forbidden.

Check your and Cygwin.com's IPs locally and from a web site providing
DNS lookups and compare with whois lookups.

> This is _your_ problem. Something has caused you to not be able to
> reach cygwin.com properly. What IP address does cygwin.com resolve
> to?
> Does using the IP address directly work for you?
> $ ping cygwin.com
> Pinging cygwin.com [209.132.180.131] with 32 bytes of data:
>> I've been round with my ISP and they are unable to reproduce the
>> issue; the response I get from here is "contact your ISP".  So who do
>> I contact about this?  Not being able to automagically fetch the
>> mirror list is annoying, and not being able to reach the site to see
>> about updates and such is similarly so.
> Understandable but nothing we can do from here.

403 is a server response e.g. folder without {index,default,home}.htm{,l}
or it could maybe result from a net block DNS BL or RBL provider hit,
although my checks of eddie.starwolf.com on a few return no hits.

Try {wget,curl,lynx} and different browsers against combinations of
http{,s}://{,www.}{cygwin.com,sourceware.org/cygwin}/{,index.html}
(echo above to see the 16 urls) and see what results you get.

Then contact sourceware.org support sourcemaster at sourceware dot org
to see what their server logs say.

--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Brian Inglis
In reply to this post by Jon TURNEY
On 2017-04-21 08:06, Jon Turney wrote:

> On 21/04/2017 07:35, Greywolf wrote:
>> Hello,
>>
>> I am having a server issue that neither I nor my ISP seem to be
>> able to resolve with regards to connecting to Cygwin.com -- namely,
>> only from my house, I get a 403 Forbidden.
>>
>> I've been round with my ISP and they are unable to reproduce the
>> issue; the response I get from here is "contact your ISP". So who
>> do I contact about this? Not being able to automagically fetch the
>> mirror list is annoying, and not being able to reach the site to
>> see about updates and such is similarly so.
>
> You might try contacting the overseers list to ask if this is a
> problem similar to [1].
>
> [1] https://www.sourceware.org/ml/overseers/2016-q2/msg00019.html

A proxy server could also possibly cause the same symptoms.
Are you accessing the web directly or via any type of proxy
e.g at your ISP, or over a VPN?

--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Greywolf
In reply to this post by Gluszczak, Glenn-2
Greetings,

I'm trying from several different machines in the house, some directly
connected, as well as any thru the NAT interface.  This is the ONLY site
I cannot reach normally.  I have to use the Tor browser to reach the
site, and, even then, once I get a new cygwin setup .exe, the list of
mirrors doesn't auto-fill because (surprise, surprise) I cannot connect
via any known protocol to either www.cygwin.com or 209.132.180.131.

The SSL certificates I get from a successful Tor hit and an unsuccessful
403 from home are identical

I am concluding that at least the address range 69.12.250.{40-47} are
being blocked; and it probably extends beyond that.

Firewall is a Watchguard Firebox running pf_sense.  I get the 403 even
with a direct (non-firewalled, non-routed connection)

I have attached two .txt file with runs from two servers within my
house, one running NetBSD, one running Windows [thus the importance of
cygwin].
Included are runs from 'host'/'nslookup', 'ping', 'traceroute', 'curl'
and 'openssl'

This is NOT a local firewall issue, otherwise my other machines on
different addresses would not have a problem.

smaug is my internal firewall.
stupidhead is the default next hop from said firewall.

"...it's nothing to do with cygwin.com."

Sooooo, why else would I get a refusal from the web server from this
address when I can connect from elsewhere ** and the SSL certificate is
the same ** ??

What am I missing?

"...but there's nothing we can do from here."

Where is "here"? If "here" == "cygwin.com", you can't tell me if my IP
is on an internal blacklist (and, moreso, why?)??


On 2017-04-21 08:06, Gluszczak, Glenn wrote:

>
> Agree, it's nothing to do with Cygwin.com.
>
> Check for a firewall on your local machine.  Check your home router to see if it has a firewall with restrictions.
> Perhaps you're passing through a proxy server or firewall at the ISP?
> Try traceroute or wget to analyze what site you're really attaching to.
>
>
>
> On 4/21/2017 2:35 AM, Greywolf wrote:
>> Hello,
>>
>> I am having a server issue that neither I nor my ISP seem to be able
>> to resolve with regards to connecting to Cygwin.com -- namely, only
>> from my house, I get a 403 Forbidden.
>>
>
> This is _your_ problem.  Something has caused you to not be able to reach cygwin.com properly.  What IP address does cygwin.com resolve to?
> Does using the IP address directly work for you?
>
> $ ping cygwin.com
>
> Pinging cygwin.com [209.132.180.131] with 32 bytes of data:
>
>
>> I've been round with my ISP and they are unable to reproduce the
>> issue; the response I get from here is "contact your ISP".  So who do
>> I contact about this?  Not being able to automagically fetch the
>> mirror list is annoying, and not being able to reach the site to see
>> about updates and such is similarly so.
>>
>
> Understandable but nothing we can do from here.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

cygwin-403-BSD.txt (13K) Download Attachment
cygwin-403-Windows.txt (11K) Download Attachment
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Brian Inglis
On 2017-04-22 21:04, Greywolf wrote:

> I'm trying from several different machines in the house, some
> directly connected, as well as any thru the NAT interface. This is
> the ONLY site I cannot reach normally. I have to use the Tor browser
> to reach the site, and, even then, once I get a new cygwin setup
> .exe, the list of mirrors doesn't auto-fill because (surprise,
> surprise) I cannot connect via any known protocol to either
> www.cygwin.com or 209.132.180.131.
> The SSL certificates I get from a successful Tor hit and an
> unsuccessful 403 from home are identical
> I am concluding that at least the address range 69.12.250.{40-47} are
> being blocked; and it probably extends beyond that.
> Firewall is a Watchguard Firebox running pf_sense. I get the 403 even
> with a direct (non-firewalled, non-routed connection)
> I have attached two .txt file with runs from two servers within my
> house, one running NetBSD, one running Windows [thus the importance
> of cygwin].
> Included are runs from 'host'/'nslookup', 'ping', 'traceroute',
> 'curl' and 'openssl'
> This is NOT a local firewall issue, otherwise my other machines on
> different addresses would not have a problem.
> smaug is my internal firewall.
> stupidhead is the default next hop from said firewall.
> "...it's nothing to do with cygwin.com."
> Sooooo, why else would I get a refusal from the web server from this
> address when I can connect from elsewhere ** and the SSL certificate
> is the same ** ??
> What am I missing?
> "...but there's nothing we can do from here."
> Where is "here"? If "here" == "cygwin.com", you can't tell me if my
> IP is on an internal blacklist (and, moreso, why?)??

Sourceware runs the servers. Contact sourceware.org support
sourcemaster at sourceware dot org to see what their server
logs say, or what their BLs are blocking.

--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

RE: What is the proper mailing list for server issues?

Gluszczak, Glenn-2
In reply to this post by Greywolf
Ok, I spoke too hastily.  It's possible a webserver blocks sites or the ISP blocks.
Also, perhaps cygwin.com can't resolve starwolf.com as Brian suggested.
Looking at your curl and openssl output I see this oddity

"No ALPN negotiated"
"ALPN, server did not agree to a protocol"

According to this site cygwin.com does not support HTTP/2.  Must be using 1.1.
https://tools.keycdn.com/http2-test

Does this get you a web page?

curl -v --http1.0 https://www.cygwin.com

You're not doing any port forwarding of 443?

Glenn

============================================================

Greetings,

I'm trying from several different machines in the house, some directly connected, as well as any thru the NAT interface.  This is the ONLY site I cannot reach normally.  I have to use the Tor browser to reach the site, and, even then, once I get a new cygwin setup .exe, the list of mirrors doesn't auto-fill because (surprise, surprise) I cannot connect via any known protocol to either www.cygwin.com or 209.132.180.131.

The SSL certificates I get from a successful Tor hit and an unsuccessful
403 from home are identical

I am concluding that at least the address range 69.12.250.{40-47} are being blocked; and it probably extends beyond that.

Firewall is a Watchguard Firebox running pf_sense.  I get the 403 even with a direct (non-firewalled, non-routed connection)

I have attached two .txt file with runs from two servers within my house, one running NetBSD, one running Windows [thus the importance of cygwin].
Included are runs from 'host'/'nslookup', 'ping', 'traceroute', 'curl'
and 'openssl'

This is NOT a local firewall issue, otherwise my other machines on different addresses would not have a problem.

smaug is my internal firewall.
stupidhead is the default next hop from said firewall.

"...it's nothing to do with cygwin.com."

Sooooo, why else would I get a refusal from the web server from this address when I can connect from elsewhere ** and the SSL certificate is the same ** ??

What am I missing?

"...but there's nothing we can do from here."

Where is "here"? If "here" == "cygwin.com", you can't tell me if my IP is on an internal blacklist (and, moreso, why?)??


On 2017-04-21 08:06, Gluszczak, Glenn wrote:

>
> Agree, it's nothing to do with Cygwin.com.
>
> Check for a firewall on your local machine.  Check your home router to see if it has a firewall with restrictions.
> Perhaps you're passing through a proxy server or firewall at the ISP?
> Try traceroute or wget to analyze what site you're really attaching to.
>
>
>
> On 4/21/2017 2:35 AM, Greywolf wrote:
>> Hello,
>>
>> I am having a server issue that neither I nor my ISP seem to be able
>> to resolve with regards to connecting to Cygwin.com -- namely, only
>> from my house, I get a 403 Forbidden.
>>
>
> This is _your_ problem.  Something has caused you to not be able to reach cygwin.com properly.  What IP address does cygwin.com resolve to?
> Does using the IP address directly work for you?
>
> $ ping cygwin.com
>
> Pinging cygwin.com [209.132.180.131] with 32 bytes of data:
>
>
>> I've been round with my ISP and they are unable to reproduce the
>> issue; the response I get from here is "contact your ISP".  So who do
>> I contact about this?  Not being able to automagically fetch the
>> mirror list is annoying, and not being able to reach the site to see
>> about updates and such is similarly so.
>>
>
> Understandable but nothing we can do from here.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: What is the proper mailing list for server issues?

Brian Inglis
On 2017-04-24 08:59, Gluszczak, Glenn wrote:

> On 2017-04-21 08:06, Gluszczak, Glenn wrote:
>> On 4/21/2017 2:35 AM, Greywolf wrote:
>>> I am having a server issue that neither I nor my ISP seem to be able
>>> to resolve with regards to connecting to Cygwin.com -- namely, only
>>> from my house, I get a 403 Forbidden.
>> This is _your_ problem. Something has caused you to not be able to
>> reach cygwin.com properly. What IP address does cygwin.com resolve
>> to?
>> Does using the IP address directly work for you?
>> $ ping cygwin.com
>> Pinging cygwin.com [209.132.180.131] with 32 bytes of data:
>>> I've been round with my ISP and they are unable to reproduce the
>>> issue; the response I get from here is "contact your ISP". So who
>>> do I contact about this? Not being able to automagically fetch
>>> the mirror list is annoying, and not being able to reach the site
>>> to see about updates and such is similarly so.
>> Understandable but nothing we can do from here.
>>> I'm trying from several different machines in the house, some
>>> directly connected, as well as any thru the NAT interface. This
>>> is the ONLY site I cannot reach normally. I have to use the Tor
>>> browser to reach the site, and, even then, once I get a new
>>> cygwin setup .exe, the list of mirrors doesn't auto-fill because
>>> (surprise, surprise) I cannot connect via any known protocol to
>>> either www.cygwin.com or 209.132.180.131.
>>> The SSL certificates I get from a successful Tor hit and an
>>> unsuccessful 403 from home are identical
>>> I am concluding that at least the address range
>>> 69.12.250.{40-47} are being blocked; and it probably extends
>>> beyond that.
>>> Firewall is a Watchguard Firebox running pf_sense. I get the 403
>>> even with a direct (non-firewalled, non-routed connection)
>>> I have attached two .txt file with runs from two servers within
>>> my house, one running NetBSD, one running Windows [thus the
>>> importance of cygwin].
>>> Included are runs from 'host'/'nslookup', 'ping', 'traceroute',
>>> 'curl' and 'openssl'
>>> This is NOT a local firewall issue, otherwise my other machines
>>> on different addresses would not have a problem.
>>> smaug is my internal firewall.
>>> stupidhead is the default next hop from said firewall.
>>> "...it's nothing to do with cygwin.com."
>>> Sooooo, why else would I get a refusal from the web server from
>>> this address when I can connect from elsewhere ** and the SSL
>>> certificate is the same ** ??
>>> What am I missing?
>>> "...but there's nothing we can do from here."
>>> Where is "here"? If "here" == "cygwin.com", you can't tell me if
>>> my IP is on an internal blacklist (and, moreso, why?)??
>>>> Agree, it's nothing to do with Cygwin.com.
>>>> Check for a firewall on your local machine. Check your home
>>>> router to see if it has a firewall with restrictions.
>>>> Perhaps you're passing through a proxy server or firewall at
>>>> the ISP?
>>>> Try traceroute or wget to analyze what site you're really
>>>> attaching to.
> Ok, I spoke too hastily. It's possible a webserver blocks sites or
> the ISP blocks.
> Also, perhaps cygwin.com can't resolve starwolf.com as Brian
> suggested.
> Looking at your curl and openssl output I see this oddity
> "No ALPN negotiated"
> "ALPN, server did not agree to a protocol"
> According to this site cygwin.com does not support HTTP/2. Must be
> using 1.1.
> https://tools.keycdn.com/http2-test
> Does this get you a web page?
> curl -v --http1.0 https://www.cygwin.com
> You're not doing any port forwarding of 443?

I recall some issue in the past with http2 sites, TLS, http2/ALPN,
spdy/NPN, and I remember having to run curl --no-alpn --no-npn to
get it to work, but I can't find any email or script with it, so
may have been an adhoc throwaway command, and/or something
improperly set up on a web server or with curl that did not
negotiate properly during connection setup.

Download testssl.sh from https://testssl.sh/ or clone it from the
linked github repo and try it from your problem system with
        .../testssl.sh cygwin.com
- takes a while - run it with a black background so you can see the
yellow messages.
Many local problems highlighted in magenta are just warnings that your
SSL installation disables insecure ciphers.
Something may be highlighted with your system or their server that you
can discuss with
        sourcemaster at sourceware dot org.

--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Loading...