PDA

View Full Version : Weird One to me, any help gladly recieved.


Darlington
27-12-2009, 20:39
Hi,
I have a really weird problem and can't resolve it.

I spend a fair bit of time on a football chat forum www.extremefootballforum.co.uk.
Well on Thursday gone it went on me and I assumed it was the site that was having problems. On boxing day I e-mailed a colleague on the forum who said it was up and running and no problems with it at all over the last few days.
So it's only me that suddenly can't access it.

I did all the usual of resetting the router, reseting IE, making sure it is listed as a trusted site in security etc. but still the same. Have done system restore and everything suggested on virgin medias broadband help with regard to "can't access some websites".

Then I thought try another PC which perhaps I should have done earlier. Well no joy there.
So I can get on every site I want but that one on any PC in the house. It is doing my head in. I can access the site via a proxy site but it limits what I can do on there.

Oh I have tried doing a ping of the website address and that comes back as timed out.

I just don't know what to do now but I know seem to think it must be something virgin media has done that is stopping it.

Anyway like I said any ideas, help will be gratefully received. Especially if it solves it.

Cheers
Darlington

Sephiroth
27-12-2009, 20:52
Have you tried IPCONFIG /FLUSHDNS

Darlington
27-12-2009, 20:58
Have you tried IPCONFIG /FLUSHDNS

Just tried that, as per your advice, but no joy. It's still the same.

webcrawler2050
27-12-2009, 21:11
Could you try

tracert extremefootballforum.co.uk
and
ping extremefootballforum.co.uk

C:\Users\Richard>tracert extremefootballforum.co.uk

Tracing route to extremefootballforum.co.uk [67.220.225.50]
over a maximum of 30 hops:

1 9 ms 14 ms 8 ms 10.56.208.1
2 8 ms 9 ms 10 ms swin-cam-1b-ge99.network.virginmedia.net [81.110
.128.157]
3 13 ms 13 ms 12 ms brhm-core-1b-ge-016-0.network.virginmedia.net [1
95.182.180.225]
4 12 ms 14 ms 14 ms bir-bb-b-ae1-0.network.virginmedia.net [213.105.
103.101]
5 14 ms 12 ms 20 ms bir-bb-a-ae0-0.network.virginmedia.net [62.253.1
85.153]
6 25 ms 21 ms 17 ms man-bb-b-so-510-0.network.virginmedia.net [62.25
3.185.134]
7 18 ms 27 ms 19 ms pop-bb-a-as4-0.network.virginmedia.net [212.43.1
62.85]
8 49 ms 36 ms 27 ms amst-ic-1-as0-0.network.virginmedia.net [213.105
.175.6]
9 141 ms 172 ms 137 ms rc2ec.il.shawcable.net [195.69.144.148]
10 135 ms 134 ms 134 ms rc1ec-tge0-0-0-0.il.shawcable.net [66.163.65.17]

11 129 ms 149 ms 129 ms rc2sh-pos3-0.mt.shawcable.net [66.163.76.146]
12 133 ms 128 ms 169 ms ra1sh-ge4-3.mt.shawcable.net [66.163.66.37]
13 216 ms 249 ms 199 ms rx0sh-telesat-canada.mt.bigpipeinc.com [66.244.2
55.62]
14 160 ms 129 ms 130 ms hp17.hostpapa.com [67.220.225.50]

Trace complete.

Thats my tracert, it *could* be a routing issue. So your tracert will clarify

III
27-12-2009, 21:34
You'll find browsing via IP address http://67.220.225.50/ results in the default cPanel
"Great Success !
Apache is working on your cPanel® and WHM™ Server" message ;)

Darlington
27-12-2009, 21:49
ok I have run tracert and below is what i got. Don't know what it means though?

http://img15.imageshack.us/img15/242/screenieyw.jpg

---------- Post added at 20:49 ---------- Previous post was at 20:35 ----------

You'll find browsing via IP address http://67.220.225.50/ results in the default cPanel
"Great Success !
Apache is working on your cPanel® and WHM™ Server" message ;)

Sorry for my ignorance fella but it don't mean a thing to me. Can you explain to me what you mean?

Toto
27-12-2009, 21:54
Possible problem with your IP address?

Have you tried a proxy?

I'm getting to the site no probs, traceroute similar to yours.

Darlington
27-12-2009, 21:59
Possible problem with your IP address?

Have you tried a proxy?

I'm getting to the site no probs, traceroute similar to yours.

I can get on via a proxy site yes. But would prefer to resolve this as other people aren't having this problem. For instance I can get on at work ok. Just at home.

webcrawler2050
27-12-2009, 22:03
Aha. Got it I think. BIND on that cPanel server is foobaaad, I believe.


As far as I can tell, if the "cPanel holding" page is being displayed, then the A record for that domain is not set right on the server, server side.

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Richard>nslookup
Default Server: indnsc60.bt.net
Address: 194.72.0.98

> server ns1.hostpapa.com
Default Server: ns1.hostpapa.com
Address: 69.42.58.5

> set type=a
> extremefootballforum.co.uk
Server: ns1.hostpapa.com
Address: 69.42.58.5

Name: extremefootballforum.co.uk
Address: 67.220.225.50

>


And then you've got a routing issue from hop 11 onwards

III
27-12-2009, 22:07
Routing is real funky. I can trace via port 80 but not 8080 :erm:

lll@XaN ~> traceroute www.extremefootballforum.co.uk
traceroute to www.extremefootballforum.co.uk (67.220.225.50), 30 hops max, 60 byte packets
1 192.168.1.254 (192.168.1.254) 18.223 ms 16.634 ms 15.021 ms
2 * * *
3 * * *
4 xe-9-1-0.edge3.London1.Level3.net (212.113.15.65) 46.406 ms 48.385 ms 48.601 ms
5 ae-34-52.ebr2.London1.Level3.net (4.69.139.97) 50.652 ms 55.161 ms 50.843 ms
6 ae-42-42.ebr1.NewYork1.Level3.net (4.69.137.70) 119.766 ms ae-41-41.ebr1.NewYork1.Level3.net (4.69.137.66) 107.170 ms 107.090 ms
7 ae-61-61.csw1.NewYork1.Level3.net (4.69.134.66) 114.454 ms ae-71-71.csw2.NewYork1.Level3.net (4.69.134.70) 101.207 ms ae-81-81.csw3.NewYork1.Level3.net (4.69.134.74) 98.354 ms
8 ae-94-94.ebr4.NewYork1.Level3.net (4.69.134.125) 108.858 ms ae-64-64.ebr4.NewYork1.Level3.net (4.69.134.113) 124.385 ms ae-94-94.ebr4.NewYork1.Level3.net (4.69.134.125) 126.056 ms
9 ae-5-5.car1.Montreal2.Level3.net (4.69.141.5) 118.188 ms 120.206 ms 120.422 ms
10 ae-11-11.car2.Montreal2.Level3.net (4.69.141.1) 123.588 ms 123.796 ms 124.006 ms
11 ae-2-2.car2.Toronto2.Level3.net (4.69.140.253) 130.034 ms 132.507 ms 132.686 ms
12 ae-11-11.car1.Toronto2.Level3.net (4.69.140.249) 132.897 ms 108.475 ms 110.518 ms
13 WBS-CONNECT.car1.Toronto2.Level3.net (4.59.180.106) 175.641 ms 179.005 ms 181.795 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * *^Cfish: Job 1, “traceroute www.extremefootballforum.co.uk” terminated by signal SIGINT (Quit request from job control (^C))
lll@XaN ~> tcptraceroute www.extremefootballforum.co.uk
Selected device wlan0, address 192.168.1.64, port 38028 for outgoing packets
Tracing the path to www.extremefootballforum.co.uk (67.220.225.50) on TCP port 80 (www), 30 hops max
1 192.168.1.254 75.213 ms 99.843 ms 99.930 ms
2 * * *
3 * * *
4 * * *
5 ae-34-52.ebr2.London1.Level3.net (4.69.139.97) 24.647 ms 24.754 ms 24.332 ms
6 ae-44-44.ebr1.NewYork1.Level3.net (4.69.137.78) 93.072 ms 95.920 ms
ae-42-42.ebr1.NewYork1.Level3.net (4.69.137.70) 92.623 ms
7 ae-71-71.csw2.NewYork1.Level3.net (4.69.134.70) 105.502 ms 94.063 ms 106.297 ms
8 ae-94-94.ebr4.NewYork1.Level3.net (4.69.134.125) 94.329 ms 94.036 ms 105.496 ms
9 ae-5-5.car1.Montreal2.Level3.net (4.69.141.5) 101.772 ms 108.779 ms 101.374 ms
10 ae-11-11.car2.Montreal2.Level3.net (4.69.141.1) 100.813 ms 100.646 ms 100.544 ms
11 ae-2-2.car2.Toronto2.Level3.net (4.69.140.253) 108.027 ms 108.104 ms 108.220 ms
12 ae-11-11.car1.Toronto2.Level3.net (4.69.140.249) 199.177 ms 158.169 ms 204.218 ms
13 WBS-CONNECT.car1.Toronto2.Level3.net (4.59.180.106) 175.623 ms 177.025 ms 174.767 ms
14 hp17.hostpapa.com (67.220.225.50) [open] 174.595 ms 174.116 ms 174.361 ms
lll@XaN ~> tcptraceroute www.extremefootballforum.co.uk 8080
Selected device wlan0, address 192.168.1.64, port 38135 for outgoing packets
Tracing the path to www.extremefootballforum.co.uk (67.220.225.50) on TCP port 8080 (http-alt), 30 hops max
1 192.168.1.254 45.136 ms 99.836 ms 99.938 ms
2 * * *
3 * * 10.1.2.169 25.710 ms
4 * * *
5 ae-34-52.ebr2.London1.Level3.net (4.69.139.97) 25.761 ms 24.538 ms 24.806 ms
6 ae-42-42.ebr1.NewYork1.Level3.net (4.69.137.70) 93.595 ms 93.464 ms
ae-41-41.ebr1.NewYork1.Level3.net (4.69.137.66) 96.317 ms
7 ae-81-81.csw3.NewYork1.Level3.net (4.69.134.74) 93.410 ms 93.508 ms 105.154 ms
8 * ae-84-84.ebr4.NewYork1.Level3.net (4.69.134.121) 101.539 ms
ae-94-94.ebr4.NewYork1.Level3.net (4.69.134.125) 94.750 ms
9 ae-5-5.car1.Montreal2.Level3.net (4.69.141.5) 100.990 ms 101.383 ms 101.546 ms
10 ae-11-11.car2.Montreal2.Level3.net (4.69.141.1) 101.478 ms 100.608 ms 101.783 ms
11 ae-2-2.car2.Toronto2.Level3.net (4.69.140.253) 108.055 ms 108.804 ms 108.288 ms
12 ae-11-11.car1.Toronto2.Level3.net (4.69.140.249) 174.957 ms 111.012 ms 108.583 ms
13 WBS-CONNECT.car1.Toronto2.Level3.net (4.59.180.106) 174.641 ms 175.565 ms 174.328 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * *^Cfish: Job 1, “tcptraceroute www.extremefootballforum.co.uk 8080” terminated by signal SIGINT (Quit request from job control (^C))
lll@XaN ~> tracepath www.extremefootballforum.co.uk
1: XaN.local (192.168.1.64) 0.121ms pmtu 1500
1: 192.168.1.254 (192.168.1.254) 26.090ms
1: 192.168.1.254 (192.168.1.254) 72.502ms
2: no reply
3: no reply
4: xe-9-1-0.edge3.London1.Level3.net (212.113.15.65) 32.597ms asymm 5
5: ae-34-52.ebr2.London1.Level3.net (4.69.139.97) 34.343ms
6: ae-43-43.ebr1.NewYork1.Level3.net (4.69.137.74) 102.913ms
7: ae-81-81.csw3.NewYork1.Level3.net (4.69.134.74) 103.339ms
8: ae-84-84.ebr4.NewYork1.Level3.net (4.69.134.121) 115.177ms
9: ae-5-5.car1.Montreal2.Level3.net (4.69.141.5) 110.997ms
10: ae-11-11.car2.Montreal2.Level3.net (4.69.141.1) 110.804ms
11: ae-2-2.car2.Toronto2.Level3.net (4.69.140.253) 119.179ms
12: ae-11-11.car1.Toronto2.Level3.net (4.69.140.249) 118.951ms
13: WBS-CONNECT.car1.Toronto2.Level3.net (4.59.180.106) 184.161ms asymm 12
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
^Cfish: Job 1, “tracepath www.extremefootballforum.co.uk” terminated by signal SIGINT (Quit request from job control (^C))
lll@XaN ~>

Darlington
27-12-2009, 22:08
Aha. Got it I think. BIND on that cPanel server is foobaaad, I believe.


As far as I can tell, if the "cPanel holding" page is being displayed, then the A record for that domain is not set right on the server, server side.

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Richard>nslookup
Default Server: indnsc60.bt.net
Address: 194.72.0.98

> server ns1.hostpapa.com
Default Server: ns1.hostpapa.com
Address: 69.42.58.5

> set type=a
> extremefootballforum.co.uk
Server: ns1.hostpapa.com
Address: 69.42.58.5

Name: extremefootballforum.co.uk
Address: 67.220.225.50

>


And then you've got a routing issue from hop 11 onwards

Can I solve it then or am I destined never to get on the site direct?

webcrawler2050
27-12-2009, 22:11
Scanning ports on 67.220.225.50

67.220.225.50 is responding on port 21 (ftp).
67.220.225.50 is responding on port 25 (smtp).
67.220.225.50 is responding on port 80 (http).
67.220.225.50 isn't responding on port 139 (netbios-ssn).
67.220.225.50 isn't responding on port 1433 (ms-sql-s).
67.220.225.50 isn't responding on port 1521 (ncube-lm).
67.220.225.50 isn't responding on port 1723 (pptp).
67.220.225.50 is responding on port 3306 (mysql).
67.220.225.50 isn't responding on port 3389 (ms-wbt-server).
67.220.225.50 isn't responding on port 8080 (webcache).

Looks like, 8080 is closed server side.

---------- Post added at 21:11 ---------- Previous post was at 21:09 ----------

http://67.220.225.50/~extremef cPanel test domain - but says "404"

Toto
28-12-2009, 13:15
The fact that the cPanel page is showing when you type the IP address of the host into a browser may simply indicate that the site is being co-hosted, and that the server behind the IP address holds multiple sites.

As Darlington can hit the site from his home connection via a proxy, I am more inclined to suspect that his IP address has been banned by the forum software or through a more sever route such as the .htaccess file.

Darlington, you can try this by forcing an IP address change for your connection. A slight change to your router's MAC address will get you a new IP address. If this works, then contact one of the site mods and ask them if there's been a ban on your old IP address, you may want to note it first before the change.

webcrawler2050
28-12-2009, 14:19
The fact that the cPanel page is showing when you type the IP address of the host into a browser may simply indicate that the site is being co-hosted, and that the server behind the IP address holds multiple sites.

As Darlington can hit the site from his home connection via a proxy, I am more inclined to suspect that his IP address has been banned by the forum software or through a more sever route such as the .htaccess file.

Darlington, you can try this by forcing an IP address change for your connection. A slight change to your router's MAC address will get you a new IP address. If this works, then contact one of the site mods and ask them if there's been a ban on your old IP address, you may want to note it first before the change.

Correct, however. It's *can* also indicate the A record is set incorrect in BIND and or, if it's a cPanel DNS Clustered machine, it's likely aswell, the cluster hasn't sync'd right to however many other machines it has.

Toto
28-12-2009, 14:45
Correct, however. It's *can* also indicate the A record is set incorrect in BIND and or, if it's a cPanel DNS Clustered machine, it's likely aswell, the cluster hasn't sync'd right to however many other machines it has.

As I said, "it may".

Lets see if the O/P hs success with the IP address change, given that going througha proxy worked for him.

dev
28-12-2009, 14:47
^ Except no one is getting the cPanel page from the hostname :p

As for the banning by forum software / .htaccess the OP would get some form of an error message, it wouldn't simply time out (which i assume is happening)

webcrawler2050
28-12-2009, 14:48
Oh wait!! I've just realised!!

The server, with have either iPtables and or CF installed it *may* be that server has blocked his IP address.

67.220.225.50 resolves to
"hp17.hostpapa.com" on the reverse DNS lookup.

Gets the cPanel holding page.

I have a sneaking suspicion, his IP has been blocked server side.

Toto
28-12-2009, 14:59
^ Except no one is getting the cPanel page from the hostname :p

As for the banning by forum software / .htaccess the OP would get some form of an error message, it wouldn't simply time out (which i assume is happening)

Yes, and you shouldn't, you will only get the cPanel page when you use the IP address instead of the hostname, which generally confirms that the IP address is hosting mutliple sites, a commonality with cheaper hosting solutions.

---------- Post added at 13:59 ---------- Previous post was at 13:57 ----------

Oh wait!! I've just realised!!

The server, with have either iPtables and or CF installed it *may* be that server has blocked his IP address.

67.220.225.50 resolves to
"hp17.hostpapa.com" on the reverse DNS lookup.

Gets the cPanel holding page.

I have a sneaking suspicion, his IP has been blocked server side.

I've seen this before, hence I suggested the proxy first. Now, the thing is, if the IP is blocked, is it a single IP or the subnet, and why the ban? ;)

webcrawler2050
28-12-2009, 14:59
Nope. You should get the holding page, when visiting the host name on a cPanel box.

I've no doubt, it's a shared box.

The ban could be for a multiple of reasons, if hes tried to login to his forum account more than 3 times and failed, if the browser is constantly is sending the username and password to the forum, if the OP has his username and password saved in his browser.



Subnet Mask : 255.255.255.128 (/25)
IP Address : 67.220.225.50
Net Block size : 128(2^7) addresses

Darlington
28-12-2009, 21:40
The fact that the cPanel page is showing when you type the IP address of the host into a browser may simply indicate that the site is being co-hosted, and that the server behind the IP address holds multiple sites.

As Darlington can hit the site from his home connection via a proxy, I am more inclined to suspect that his IP address has been banned by the forum software or through a more sever route such as the .htaccess file.

Darlington, you can try this by forcing an IP address change for your connection. A slight change to your router's MAC address will get you a new IP address. If this works, then contact one of the site mods and ask them if there's been a ban on your old IP address, you may want to note it first before the change.

I haven't tried the change of ip address as I have contact a mod on the site but he says I am not banned, which makes sense as I'm a mod on the site as well. I don't however run the site and am in the process of e-mailing him to find out if something has happened to block my ip.

webcrawler2050
28-12-2009, 21:41
I haven't tried the change of ip address as I have contact a mod on the site but he says I am not banned, which makes sense as I'm a mod on the site as well. I don't however run the site and am in the process of e-mailing him to find out if something has happened to block my ip.


It will be the server IP. Speak to the hosting company.

Get the to search for your IP and add it to the whitelist.

Darlington
28-12-2009, 22:01
It will be the server IP. Speak to the hosting company.

Get the to search for your IP and add it to the whitelist.

I will try that. Thanks for the advice.

webcrawler2050
28-12-2009, 22:51
I will try that. Thanks for the advice.


Just re-read what i said, made no sense. Anywho just give em your VM IP.