Re: connectivity to bkbits.net?

Russell King (rmk@arm.linux.org.uk)
Thu, 28 Nov 2002 21:13:47 +0000

On Thu, Nov 28, 2002 at 06:53:00PM +0200, Kai Henningsen wrote:
> >From two or three traceroutes, that problem seems to be at the SGI end. I
> can't get to them either (nothing after the same IP as for you, at hop
> #17, some place at Genuity), but you are practically next door.

Lesson #1 of firewalling: drop everything.
Lesson #2 of firewalling: only accept what you absolutely have to.

Try pointing a web browser at sgi.com port 80. I _bet_ you get a
response. The site is reachable, they just block UDP (and probably
a lot of other stuff.)

traceroute uses UDP, so if a site drops UDP (rather than blocking it)
it will appear as a black hole.

-- 
Russell King (rmk@arm.linux.org.uk)                The developer of ARM Linux
             http://www.arm.linux.org.uk/personal/aboutme.html


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/