Unstable internet connection to europe

Connection issues, drop outs or speed related faults for ADSL and ADSL2+ services
Post Reply
hixxy82
Posts: 10
Joined: Thu Jan 26, 2012 6:53 pm
Location: Australia

Unstable internet connection to europe

Post by hixxy82 » Wed Jun 20, 2012 8:31 pm

Over the last few days I've been experiencing unstable connections to europe. I run multiple ssh connections to europe and have been having these either temporarily freeze up or drop out completely at increasing regularity.

Prior to the last few days these connections have been perfectly stable. Is there something going wrong with the connection between here and europe?

The main server ip is: 193.104.228.61

Thanks.

udara
Exetel Staff
Posts: 362
Joined: Thu Dec 17, 2009 11:06 am

Re: Unstable internet connection to europe

Post by udara » Wed Jun 20, 2012 9:05 pm

Are you experiencing issues generally with your Internet or is it only to these specific servers ?

If you are experiencing these issues only to the servers in Europe will you be able to send an email to residentialsupport@exetel.com.au with a Ping and a Trace route to the servers that you are trying to access
To Log a fault ticket, please click Here or alternatively call Exetel VOIP numbers (02) 8030 1000 or 1300 788 141 (log faults 24x7)

==============
Exetel Support Portal
==============

hixxy82
Posts: 10
Joined: Thu Jan 26, 2012 6:53 pm
Location: Australia

Re: Unstable internet connection to europe

Post by hixxy82 » Wed Jun 20, 2012 10:48 pm

I have been working almost exclusively with servers in europe, but I have just spoken with my dad and he is having troubles all over.

Very frustrating. I'm connected to some european irc servers and the connections drop ever 2-6 mins without fail. Makes this pretty much impossible.

I pissed a few people off recently, on IRC, I'm begginning to wonder if they're not attacking my connection somehow. Is there a way exetel can confirm this?

hixxy82
Posts: 10
Joined: Thu Jan 26, 2012 6:53 pm
Location: Australia

Re: Unstable internet connection to europe

Post by hixxy82 » Wed Jun 20, 2012 10:56 pm

traceroute to my major problem server is:
traceroute to 193.104.228.61 (193.104.228.61), 30 hops max, 60 byte packets
1 lightning.home (192.168.1.1) 2.067 ms 2.230 ms 2.277 ms
2 * * *
3 3.3.96.58.static.exetel.com.au (58.96.3.3) 24.851 ms 26.351 ms 28.351 ms
4 * PE-5018239.sglebinte01.gw.aapt.com.au (203.174.187.153) 44.557 ms 44.776 ms
5 te3-3.sglebdist01.aapt.net.au (203.131.60.38) 47.568 ms 47.935 ms 50.777 ms
6 po6.sglebbrdr01.aapt.net.au (202.10.14.7) 51.561 ms * 40.687 ms
7 xe7-0-0-420.sebr2.global-gateway.net.nz (202.50.238.213) 42.124 ms 35.895 ms 34.548 ms
8 * * *
9 * * *
10 * * *
11 xe-0-0-0-1.r06.plalca01.us.bb.gin.ntt.net (140.174.21.17) 199.831 ms 201.338 ms 182.208 ms
12 ae-4.r07.snjsca04.us.bb.gin.ntt.net (129.250.4.119) 184.278 ms 184.248 ms 183.492 ms
13 ae-8.r21.snjsca04.us.bb.gin.ntt.net (129.250.5.56) 186.075 ms 183.462 ms 184.382 ms
14 * *

*
15 * xe-7-1-0.lon10.ip4.tinet.net (89.149.187.137) 335.220 ms 335.332 ms
16 m247-gw.ip4.tinet.net (141.136.96.230) 354.202 ms 356.020 ms 356.444 ms
17 te-2-1-211.bb1.man2.uk.gbxs.net (193.27.64.114) 375.601 ms 376.724 ms 373.112 ms
18 te-3-4-456.bb1.man3.uk.gbxs.net (77.243.185.121) 375.262 ms 375.265 ms *
19 te-4-4-0.bb1.man4.uk.gbxs.net (77.243.185.133) 375.525 ms 376.023 ms 382.202 ms
20 te-5-2-0.bg1.man.uk.m247.com (89.238.140.101) 360.442 ms 358.096 ms 361.268 ms
21 193.104.228.61 (193.104.228.61) 356.984 ms 358.386 ms 357.827 ms
Why is it we route via .nz? Surely this isn't ideal.

ping:
bioboy@dev:~$ ping 193.104.228.61
PING 193.104.228.61 (193.104.228.61) 56(84) bytes of data.
64 bytes from 193.104.228.61: icmp_req=1 ttl=44 time=355 ms
64 bytes from 193.104.228.61: icmp_req=2 ttl=44 time=354 ms
64 bytes from 193.104.228.61: icmp_req=3 ttl=44 time=355 ms
64 bytes from 193.104.228.61: icmp_req=4 ttl=44 time=359 ms
64 bytes from 193.104.228.61: icmp_req=5 ttl=44 time=355 ms
64 bytes from 193.104.228.61: icmp_req=6 ttl=44 time=357 ms
64 bytes from 193.104.228.61: icmp_req=7 ttl=44 time=357 ms
^C
--- 193.104.228.61 ping statistics ---
8 packets transmitted, 7 received, 12% packet loss, time 7095ms
rtt min/avg/max/mdev = 354.646/356.693/359.959/1.706 ms
bioboy@dev:~$
Another problem server I ssh to a lot and also having problems:
traceroute to 85.159.237.5 (85.159.237.5), 30 hops max, 60 byte packets
1 lightning.home (192.168.1.1) 1.059 ms 1.341 ms 1.490 ms
2 * * *
3 3.3.96.58.static.exetel.com.au (58.96.3.3) 24.600 ms 24.702 ms 27.636 ms
4 PE-5018239.sglebinte01.gw.aapt.com.au (203.174.187.153) 40.588 ms 41.814 ms 41.781 ms
5 * te3-3.sglebdist02.aapt.net.au (203.131.60.40) 44.976 ms 46.634 ms
6 po7.sglebbrdr01.aapt.net.au (202.10.14.9) 135.340 ms 125.162 ms 125.179 ms
7 xe7-0-0-420.sebr2.global-gateway.net.nz (202.50.238.213) 42.249 ms 63.160 ms 62.781 ms
8 * * *
9 * * *
10 * * *
11 xe-0-0-0-1.r06.plalca01.us.bb.gin.ntt.net (140.174.21.17) 183.417 ms 184.851 ms 184.927 ms
12 ae-4.r07.snjsca04.us.bb.gin.ntt.net (129.250.4.119) 345.384 ms 340.537 ms 337.943 ms
13 ae-7.r20.snjsca04.us.bb.gin.ntt.net (129.250.5.52) 182.424 ms 183.161 ms 183.151 ms
14 ae-4.r21.asbnva02.us.bb.gin.ntt.net (129.250.4.102) 256.415 ms 258.415 ms 257.393 ms
15 ae-2.r23.amstnl02.nl.bb.gin.ntt.net (129.250.2.145) 366.275 ms 363.971 ms 364.449 ms
16 * * ae-2.r02.amstnl02.nl.bb.gin.ntt.net (129.250.2.159) 365.874 ms
17 ae-0.nforce-entertainment-bv.amstnl02.nl.bb.gin.ntt.net (81.20.64.34) 339.360 ms po-0.nforce-entertainment-bv.amstnl02.nl.bb.gin.ntt.net (81.20.64.114) 336.637 ms ae-0.nforce-entertainment-bv.amstnl02.nl.bb.gin.ntt.net (81.20.64.34) 352.073 ms
18 26-239-159-85.rtr2.dbn.nl.nforce.com (85.159.239.26) 457.738 ms 365.281 ms 361.318 ms
19 sonic.hixxy.org (85.159.237.5) 338.398 ms 357.069 ms 353.571 ms
ping:
bioboy@dev:~$ ping 85.159.237.5
PING 85.159.237.5 (85.159.237.5) 56(84) bytes of data.
64 bytes from 85.159.237.5: icmp_req=1 ttl=44 time=334 ms
64 bytes from 85.159.237.5: icmp_req=2 ttl=44 time=343 ms
64 bytes from 85.159.237.5: icmp_req=3 ttl=44 time=331 ms
64 bytes from 85.159.237.5: icmp_req=4 ttl=44 time=352 ms
64 bytes from 85.159.237.5: icmp_req=5 ttl=44 time=344 ms
64 bytes from 85.159.237.5: icmp_req=6 ttl=44 time=356 ms
64 bytes from 85.159.237.5: icmp_req=7 ttl=44 time=331 ms
64 bytes from 85.159.237.5: icmp_req=8 ttl=44 time=343 ms
^C64 bytes from 85.159.237.5: icmp_req=9 ttl=44 time=353 ms

--- 85.159.237.5 ping statistics ---
9 packets transmitted, 9 received, 0% packet loss, time 8109ms
rtt min/avg/max/mdev = 331.695/343.487/356.524/8.869 ms

hixxy82
Posts: 10
Joined: Thu Jan 26, 2012 6:53 pm
Location: Australia

Re: Unstable internet connection to europe

Post by hixxy82 » Wed Jun 20, 2012 11:05 pm

Further info, I don't typically delve into my router logs, so am unable to decipher if this has any significance:
Date/Time Facility Severity Message
2012/06/20 23:00:19 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:59:22 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:59:08 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:58:04 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:57:52 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:57:38 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:56:33 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:55:56 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:55:25 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:54:39 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:54:11 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=24.145.8.43 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=14037 DF PROTO=TCP SPT=52540 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:52:25 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:52:15 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:51:46 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:51:35 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:51:10 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:50:12 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:50:12 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:47:26 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:46:57 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:45:53 user warn kernel: MASQUERADE: No route: Rusty's brain broke!
2012/06/20 22:44:12 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=41.204.60.186 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=7057 DF PROTO=TCP SPT=62446 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:12 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=220.237.2.75 DST=58.96.39.217 LEN=48 TOS=0x00 PREC=0x00 TTL=51 ID=32397 DF PROTO=TCP SPT=52776 DPT=17490 WINDOW=65535 RES=0x00 SYN URGP=0
2012/06/20 22:44:11 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=114.77.179.224 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=13334 DF PROTO=TCP SPT=56878 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:11 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=74.79.106.32 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=29792 DF PROTO=TCP SPT=9275 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:11 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=24.206.13.58 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=997 DF PROTO=TCP SPT=56980 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:10 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=50.48.92.38 DST=58.96.39.217 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=43217 DF PROTO=TCP SPT=49709 DPT=17490 WINDOW=5840 RES=0x00 SYN URGP=0
2012/06/20 22:44:10 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=83.109.151.32 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=96 ID=5776 DF PROTO=TCP SPT=53785 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:09 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=69.196.152.196 DST=58.96.39.217 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=16325 DF PROTO=TCP SPT=61509 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:09 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=83.108.121.100 DST=58.96.39.217 LEN=64 TOS=0x00 PREC=0x00 TTL=36 ID=20403 DF PROTO=TCP SPT=58456 DPT=17490 WINDOW=65535 RES=0x00 SYN URGP=0
2012/06/20 22:44:09 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=99.195.56.57 DST=58.96.39.217 LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=26994 DF PROTO=TCP SPT=60315 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:09 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=81.218.236.195 DST=58.96.39.217 LEN=52 TOS=0x00 PREC=0x00 TTL=102 ID=20442 DF PROTO=TCP SPT=63458 DPT=17490 WINDOW=8192 RES=0x00 SYN URGP=0
2012/06/20 22:44:09 user alert kernel: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=86.27.255.203 DST=58.96.39.217 LEN=64 TOS=0x00 PREC=0x00 TTL=41 ID=6559 DF PROTO=TCP SPT=62606 DPT=17490 WINDOW=65535 RES=0x00 SYN URGP=0

I'll also bring this thread to the attention of the email you mentioned.

udara
Exetel Staff
Posts: 362
Joined: Thu Dec 17, 2009 11:06 am

Re: Unstable internet connection to europe

Post by udara » Wed Jun 20, 2012 11:08 pm

hixxy82 wrote: I pissed a few people off recently, on IRC, I'm begginning to wonder if they're not attacking my connection somehow. Is there a way exetel can confirm this?
There is no way that we can confirm this

Looking at your Ping and trace route results i cannot see any issues , if your dad is also having problems with the same servers , then it is most likely that there could be an issue at the other end .
To Log a fault ticket, please click Here or alternatively call Exetel VOIP numbers (02) 8030 1000 or 1300 788 141 (log faults 24x7)

==============
Exetel Support Portal
==============

Dazzled
Volunteer Site Admin
Posts: 6007
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Unstable internet connection to europe

Post by Dazzled » Wed Jun 20, 2012 11:31 pm

The intrusions are attempts at connection (port 17490) from the SRC= addresses, being denied by your router iptables, the Linux firewall that handles NAT in the router. Connections have to be first: state RELATED,ESTABLISHED to be accepted and let in, unless you have ports opened.

Rusty's Brain is that of Rusty Russell http://en.wikipedia.org/wiki/Rusty_Russell who wrote the iptables code. After "if testing" for every actual possibility, it outputs that his brain broke.

Dazzled
Volunteer Site Admin
Posts: 6007
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Unstable internet connection to europe

Post by Dazzled » Thu Jun 21, 2012 8:08 am

A typical modem/router INPUT rule chain looks like this (this one has VoIP running on 5060):

Code: Select all

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:5060 
RAChain    all  --  anywhere             anywhere            
LAChain    all  --  anywhere             anywhere            
FWINPUTChain  all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
LOG        tcp  --  anywhere             anywhere            tcp flags:SYN,RST,ACK/SYN limit: avg 6/hour burst 5 LOG level alert prefix `Intrusion -> ' 
DROP       all  --  anywhere             anywhere            
DROP       all  --  anywhere             <your-IP-address>         
DROP       all  --  anywhere             192.168.1.1         
The referred chains above are each:

Code: Select all

target     prot opt source               destination         
Note the LOG rule. The abbreviations used in the log are listed at http://logi.cc/en/2010/07/netfilter-log-format/. There is a readable explanation of the firewall and NAT masquerade at http://www.linuxhomenetworking.com/wiki ... g_iptables.

All those probes nearly at once! Look up what can be done with hping and nmap.

Post Reply