| Author |
Message |
vokaria
|
|
Post subject: Verizon - aptosid mirrors problems. A final Update?
 Posted: 20.04.2012, 02:35
|
|
Joined: 2012-04-20
Posts: 4
Location: USA
Status: Offline
|
|
A (final?) update.
Thanks to Piper (used to love smoke pipe, - especially Latakia - mix tobaccos), i did return to the hardware side of the problem.
Honestly i do not understand the workings of all this enough, but have read in the past this very enlightening post:
http://www.increa.com/computers/verizon ... y-network/
After reviewing carefully the Wireshark logs, i realized that Verizon's Westell DSL modem was alternating between two addresses 10.0.0.1 and 10.0.0.2, apparently in an attempt to reset something. My network settings were specifically resisting any changes of sorts Brian Mork has encountered. All the address assigning was handled by a Netgear router, protected by a hefty password.
This behavior was apparently the reason for some filtering action on the part of Verizon. Probably it would resemble a spoof attack of some sort. I am only guessing here. But throwing away the Westell and changing it to something more neutral, and then allowing the modem and the bridge talk to each other reasonably, - and i am enjoying untroubled aptosid connection.
The only problem remaining - dl.google.com - google-chrome upgrade, and i'm letting this one go, at least for now. --fix-missing
Thanks for your voice of reason, Piper.
While i still do not understand why this would be affecting only Aptosid mirrors (and google-chrome updater), i am comfortable with leaving some mystery to life.
AN update:
the last two days i tried pinging the offending hubs, in my case
ping 0.so-4-0-2.XT2.NYC4.ALTER.NET
ping aldebaran.imp.fu-berlin.de
ping chcgildtcor53-po.network.tds.net
while doing apt-get upgrades.
Quite a success, i should say. Speeds practically up to normal, no chocking noticed so far.
I did notice people complaining of throttling saying that some testing programs always show a perfect connection speed, no matter what throttling is going on at the time. All these programs use pinging to measure the speed. SO, apparently our ISP overlords are still a bit shy. If you have a problem - ping the bosses, it might work.
Since the beginning of April Verizon DSL is attempting to disrupt aptosid apt-get update and upgrade through its' NYC4.ALTER.NET, verizon-gni.net, NewYork2.level3.net, NewYork1.Level3.net and tds.net domains. These are involved with every US mirror i have tried.
What is even more troubling, the Swedish and German domains telia.net, berlin.de and dfn.de are doing the same. Aptosid is certainly singled out, as proven by wireshark and traceroute, and the fact that parallel to completely stopped downloads from aptosid mirrors, i have downloaded 700MB ISOs of Ubuntu, Debian and Arch, all at the top speed, done just to make sure it is not the volume that bothers them.
If you want to see the traceroute logs, http://vokaria.livejournal.com/7099.html
Interestingly enough, i have posted this: http://debian.livejournal.com/356332.html
in livejournal's Debian community, as usual, without any delay, as the community is kinda small and stagnant. But when i attempted to post the traceroute logs and whois regarding Verizon, the livejournal's AI responded that the post will have to be "moderated".
What did you do, fellas? Gave a box of "aptosids" to obscure muslim african nation rich in oil and shark skins?.. |
Last edited by vokaria on 04.05.2012, 02:04; edited 1 time in total
|
| |
|
|
|
 |
|
Debroyston
|
|
|
Post subject: RE: Verizon - aptosid mirrors - TCP RST attacks: A solution?
Posted: 01.05.2012, 04:55
|
|
Joined: 2010-09-27
Posts: 1
Location: Ripley, Surrey, ENGLAND
Status: Offline
|
|
[quote="vokaria"]AN update:
the last two days i tried pinging the offending hubs, in my case
ping 0.so-4-0-2.XT2.NYC4.ALTER.NET
ping aldebaran.imp.fu-berlin.de
ping chcgildtcor53-po.network.tds.net
while doing apt-get upgrades.
Quite a success, i should say. Speeds practically up to normal, no chocking noticed so far.
I did notice people complaining of throttling saying that some testing programs always show a perfect connection speed, no matter what throttling is going on at the time. All these programs use pinging to measure the speed. SO, apparently our ISP overlords are still a bit shy. If you have a problem - ping the bosses, it might work.
Since the beginning of April Verizon DSL is attempting to disrupt aptosid apt-get update and upgrade through itsThe slow downloads appear only on Aptosid. Fedora and Xubuntu are normal. Is this an equipment problem or deliberate attempt to disrupt the system? |
|
|
| |
|
|
|
|
|
vokaria
|
|
|
Post subject: RE: Verizon - aptosid mirrors - TCP RST attacks: A solution?
Posted: 03.05.2012, 10:59
|
|
Joined: 2012-04-20
Posts: 4
Location: USA
Status: Offline
|
|
Unless there is an Aptosid hater sitting on many hubs both in the US and in Europe, - it is organized.
If at first the nature of disruption were TCP RST (reset packets), now they are using ICMP attack - about 25 "Time exceeded" packets and then 5 or so "Destination unreachable", -with the connection broken.
On top of that, pinging them worked great for a while, now i succeed in keeping connection alive - the download returns and drops out again, but no speed at all. Yesterday's (May 2 2012) 100 MB or so upgrade took me about an HOUR! vs the normal 5 minutes.
Let's face it, we are bugs to them (not unlike one on aptosid wallpaper). |
|
|
| |
|
|
|
|
|
piper
|
|
|
Post subject: RE: Verizon - aptosid mirrors - TCP RST attacks: A solution?
Posted: 03.05.2012, 15:28
|
|
Moderator
Joined: 2010-09-11
Posts: 481
Location: cheektowaga, ny
Status: Offline
|
|
If your using a router, can you disconnect from it an go straight to the modem ?
I have done a pretty good search on this and it seems like you are the only one having this problem, my son has verizon at home and for his phone and I don't see this problem at all. |
_________________
debian sid | apt-get into it
|
| |
|
|
|
|
|
vokaria
|
|
|
Post subject: RE: Verizon - aptosid mirrors - TCP RST attacks: A solution?
Posted: 03.05.2012, 17:12
|
|
Joined: 2012-04-20
Posts: 4
Location: USA
Status: Offline
|
|
That's where i started from, disconnecting the router, then plugging in a different DSL modem (have 3 of them), went through every bit, including using Verizon's own tools to check my lines. I have all the phone lines soldered, no silly mechanical connections. All the tests go trough with flying colors. I stopped using wireless altogether, because of this problem.
If i initiate any other download immediately around the same time, no matter size, time of day and such, - no interruptions, top speed - perfect.
I am curious what did Debroyston mean (see the 30.04.2012, 23:55 comment), whether he has a similar situation.
Of course it might be personal filtering, i might be a cyber criminal and not know it (i'm always the last one to find out...), but i have ran Wireshark for days, documenting everything i do online, with absolutely nothing out of ordinary, - until i run apt-get update or upgrade on Aptosid.
I love Aptosid, i never was this happy with any other Debian based distribution (or any other, for that matter), so this situation is quite frustrating. |
|
|
| |
|
|
|
|
|
|
|
