-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Does someone have a contact name at mfa.gov.cn? When one of our users tried to send an email to a host at mail.mfa.gov.cn, we discovered that we are being blocked by mfa.gov.cn. From my gmail account, I have sent multiple emails to the contacts listed in APNIC. But, no one has responded. Moreover, when I sent an email to postmaster@mfa.gov.cn, the email bounced as that mailbox does not exist. If someone has an IP range of 192.X.X.X, can you see if you see if you can get to mail.mfa.gov.cn? At this point I do not know if someone fat fingered a RFC1918 ACL & is blocking 192.168.0.0/8 instead of 192.168.0.0/16, or if they are blocking us upon our AS number (26099). Thanks, - -- Cmk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEVAwUBR/Owqd9pUgshfvqBAQLeOAf/bbgGcH9kVAaWRQQ8kymXBLIme4W3u0Gl /6AHmdwK/CAxEwd+PYSl0ZsoHtdfwdHSRzRUGFyP1BLEObJjm2Vck8QEVTJMUgyl oo+qqJ3FMN6TpYaaMo+l+O72FQtQJrIGdnpHT32ulCuHcqRb+9iepqOK6jru7SAp xHlGHqUjgULHM8jU6K9l3RZF7zmvZOuuhcs+gKcqayFg8CaEIhssnC3NV4IiSg9y doWnOfVQ0xow6SPbwkfcfFSA6iVWO3Ot2mdgswtT9FLeCQZdECqCCJn8pEPluOLR 8cti46MAZIWLRyCTR5yziWpyjzcwgOfwQeCnOew4RXI/Jw/z6nMuxQ== =B25R -----END PGP SIGNATURE-----
On Wed, Apr 02, 2008 at 12:13:29PM -0400, Christina Klam wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Does someone have a contact name at mfa.gov.cn? When one of our users tried to send an email to a host at mail.mfa.gov.cn, we discovered that we are being blocked by mfa.gov.cn. From my gmail account, I have sent multiple emails to the contacts listed in APNIC. But, no one has responded. Moreover, when I sent an email to postmaster@mfa.gov.cn, the email bounced as that mailbox does not exist.
If someone has an IP range of 192.X.X.X, can you see if you see if you can get to mail.mfa.gov.cn? At this point I do not know if someone fat fingered a RFC1918 ACL & is blocking 192.168.0.0/8 instead of 192.168.0.0/16, or if they are blocking us upon our AS number (26099).
I suspect fat fingers. I am 192.160.193.X and get the following: lou@pop:/users/lou -=[1]=- telnet mail.mfa.gov.cn smtp (hangs) lou@pop:/users/lou -=[2]=- dig mail.mfa.gov.cn ; <<>> DiG 9.2.1rc2 <<>> mail.mfa.gov.cn ;; global options: printcmd ;; connection timed out; no servers could be reached lou@pop:/users/lou -=[3]=- whois mfa.gov.cn Domain Name: mfa.gov.cn ROID: 20021209s10061s00002107-cn Domain Status: serverDeleteProhibited Domain Status: serverUpdateProhibited Domain Status: serverTransferProhibited Registrant Organization: 中华人民共和国外交部 Registrant Name: 信息化办主任 Administrative Email: master@mfa.gov.cn Sponsoring Registrar: 网络中心 Name Server:ns2.mfa.gov.cn Name Server:ns4.mfa.gov.cn Registration Date: 2002-10-17 00:00 Expiration Date: 2010-10-17 00:00 lou@pop:/users/lou -=[4]=- dig mfa.gov.cn mx ; <<>> DiG 9.2.1rc2 <<>> mfa.gov.cn mx ;; global options: printcmd ;; connection timed out; no servers could be reached lou@pop:/users/lou -=[5]=- However, from an account I have elsewhere, well% telnet mail.mfa.gov.cn smtp Trying 219.238.192.6... Connected to mail.mfa.gov.cn. Escape character is '^]'. 220 mail.mfa.gov.cn ESMTP Mirapoint Messaging Server MOS 3.8.2-GA Queueing quit 221 mail.mfa.gov.cn Goodbye Connection closed by foreign host. well%
Thanks, - -- Cmk
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEVAwUBR/Owqd9pUgshfvqBAQLeOAf/bbgGcH9kVAaWRQQ8kymXBLIme4W3u0Gl /6AHmdwK/CAxEwd+PYSl0ZsoHtdfwdHSRzRUGFyP1BLEObJjm2Vck8QEVTJMUgyl oo+qqJ3FMN6TpYaaMo+l+O72FQtQJrIGdnpHT32ulCuHcqRb+9iepqOK6jru7SAp xHlGHqUjgULHM8jU6K9l3RZF7zmvZOuuhcs+gKcqayFg8CaEIhssnC3NV4IiSg9y doWnOfVQ0xow6SPbwkfcfFSA6iVWO3Ot2mdgswtT9FLeCQZdECqCCJn8pEPluOLR 8cti46MAZIWLRyCTR5yziWpyjzcwgOfwQeCnOew4RXI/Jw/z6nMuxQ== =B25R -----END PGP SIGNATURE-----
-- -=[L]=- C++ produces no noticeable overhead versus C.
Lou, I was not able to ping 219.238.192.6 from 192.* space, but was able to ping it from a non-192.* network in the same AS. It looks like they are filtering 192.168.0.0/8. Wouldn't be the first time. Lou Katz wrote:
On Wed, Apr 02, 2008 at 12:13:29PM -0400, Christina Klam wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Does someone have a contact name at mfa.gov.cn? When one of our users tried to send an email to a host at mail.mfa.gov.cn, we discovered that we are being blocked by mfa.gov.cn. From my gmail account, I have sent multiple emails to the contacts listed in APNIC. But, no one has responded. Moreover, when I sent an email to postmaster@mfa.gov.cn, the email bounced as that mailbox does not exist.
If someone has an IP range of 192.X.X.X, can you see if you see if you can get to mail.mfa.gov.cn? At this point I do not know if someone fat fingered a RFC1918 ACL & is blocking 192.168.0.0/8 instead of 192.168.0.0/16, or if they are blocking us upon our AS number (26099).
I suspect fat fingers. I am 192.160.193.X and get the following:
lou@pop:/users/lou -=[1]=- telnet mail.mfa.gov.cn smtp
(hangs)
lou@pop:/users/lou -=[2]=- dig mail.mfa.gov.cn
; <<>> DiG 9.2.1rc2 <<>> mail.mfa.gov.cn ;; global options: printcmd ;; connection timed out; no servers could be reached
lou@pop:/users/lou -=[3]=- whois mfa.gov.cn Domain Name: mfa.gov.cn ROID: 20021209s10061s00002107-cn Domain Status: serverDeleteProhibited Domain Status: serverUpdateProhibited Domain Status: serverTransferProhibited Registrant Organization: 中华人民共和国外交部 Registrant Name: 信息化办主任 Administrative Email: master@mfa.gov.cn Sponsoring Registrar: 网络中心 Name Server:ns2.mfa.gov.cn Name Server:ns4.mfa.gov.cn Registration Date: 2002-10-17 00:00 Expiration Date: 2010-10-17 00:00 lou@pop:/users/lou -=[4]=- dig mfa.gov.cn mx
; <<>> DiG 9.2.1rc2 <<>> mfa.gov.cn mx ;; global options: printcmd ;; connection timed out; no servers could be reached lou@pop:/users/lou -=[5]=-
However, from an account I have elsewhere,
well% telnet mail.mfa.gov.cn smtp Trying 219.238.192.6... Connected to mail.mfa.gov.cn. Escape character is '^]'. 220 mail.mfa.gov.cn ESMTP Mirapoint Messaging Server MOS 3.8.2-GA Queueing quit 221 mail.mfa.gov.cn Goodbye Connection closed by foreign host. well%
Thanks, - -- Cmk
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEVAwUBR/Owqd9pUgshfvqBAQLeOAf/bbgGcH9kVAaWRQQ8kymXBLIme4W3u0Gl /6AHmdwK/CAxEwd+PYSl0ZsoHtdfwdHSRzRUGFyP1BLEObJjm2Vck8QEVTJMUgyl oo+qqJ3FMN6TpYaaMo+l+O72FQtQJrIGdnpHT32ulCuHcqRb+9iepqOK6jru7SAp xHlGHqUjgULHM8jU6K9l3RZF7zmvZOuuhcs+gKcqayFg8CaEIhssnC3NV4IiSg9y doWnOfVQ0xow6SPbwkfcfFSA6iVWO3Ot2mdgswtT9FLeCQZdECqCCJn8pEPluOLR 8cti46MAZIWLRyCTR5yziWpyjzcwgOfwQeCnOew4RXI/Jw/z6nMuxQ== =B25R -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matt & Lou, I have sent an updated email to master@mfa.gov.cn. And, I will have a co-worker who speaks Chinese call them today. Thank you for your help, Christina Matt F wrote: | Lou, | | I was not able to ping 219.238.192.6 from 192.* space, but was able to | ping it from a non-192.* network in the same AS. It looks like they are | filtering 192.168.0.0/8. Wouldn't be the first time. | | Lou Katz wrote: |> On Wed, Apr 02, 2008 at 12:13:29PM -0400, Christina Klam wrote: |> | Does someone have a contact name at mfa.gov.cn? When one of our users | tried to send an email to a host at mail.mfa.gov.cn, we discovered that | we are being blocked by mfa.gov.cn. From my gmail account, I have sent | multiple emails to the contacts listed in APNIC. But, no one has | responded. Moreover, when I sent an email to postmaster@mfa.gov.cn, the | email bounced as that mailbox does not exist. | | If someone has an IP range of 192.X.X.X, can you see if you see if you | can get to mail.mfa.gov.cn? At this point I do not know if someone fat | fingered a RFC1918 ACL & is blocking 192.168.0.0/8 instead of | 192.168.0.0/16, or if they are blocking us upon our AS number (26099). | | |>> |>> I suspect fat fingers. I am 192.160.193.X and get the following: |>> |>> |>> lou@pop:/users/lou -=[1]=- telnet mail.mfa.gov.cn smtp |>> |>> (hangs) |>> |>> lou@pop:/users/lou -=[2]=- dig mail.mfa.gov.cn |>> |>> ; <<>> DiG 9.2.1rc2 <<>> mail.mfa.gov.cn |>> ;; global options: printcmd |>> ;; connection timed out; no servers could be reached |>> |>> lou@pop:/users/lou -=[3]=- whois mfa.gov.cn |>> Domain Name: mfa.gov.cn |>> ROID: 20021209s10061s00002107-cn |>> Domain Status: serverDeleteProhibited |>> Domain Status: serverUpdateProhibited |>> Domain Status: serverTransferProhibited |>> Registrant Organization: |>> -Nºqý¤è |>> Registrant Name: áo;û |>> Administrative Email: master@mfa.gov.cn |>> Sponsoring Registrar: QÜ-à |>> Name Server:ns2.mfa.gov.cn |>> Name Server:ns4.mfa.gov.cn |>> Registration Date: 2002-10-17 00:00 |>> Expiration Date: 2010-10-17 00:00 |>> lou@pop:/users/lou -=[4]=- dig mfa.gov.cn mx |>> |>> ; <<>> DiG 9.2.1rc2 <<>> mfa.gov.cn mx |>> ;; global options: printcmd |>> ;; connection timed out; no servers could be reached |>> lou@pop:/users/lou -=[5]=- |>> |>> However, from an account I have elsewhere, |>> |>> well% telnet mail.mfa.gov.cn smtp |>> Trying 219.238.192.6... |>> Connected to mail.mfa.gov.cn. |>> Escape character is '^]'. |>> 220 mail.mfa.gov.cn ESMTP Mirapoint Messaging Server MOS 3.8.2-GA |>> Queueing |>> quit |>> 221 mail.mfa.gov.cn Goodbye |>> Connection closed by foreign host. |>> well% |>> | Thanks, | -- Cmk | | |> |> |> |> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEVAwUBR/TQKN9pUgshfvqBAQJ1AQf9GH7F0Z685oYHtMmWUX92NJ4EJfisAlNz bYojJzEKmf5rSczHBC6vdpRooN7rm2Udi+JnFCIRsefeHXPvJpbk5dx/Ozwq2Fnb r152HIs2asZXCXQo5LXC5+Ght4qusZtJWAZ+v2atM8BvFJolpfix7CXb0kQq4s2W LPFhO0Tauc2JqY2eLb8/DZZblzQxVciLM1/qpSzSxzePYjvyK5RTT1MlAT/KHd2y vMsu+4ts2a8h1Xl641hu9Ak+Ps8erWCtlRurPTk2vyUDJ3SdR8w8ZyBLWJFz51pV ZU7WwRdzmrOLMFXnnEGtyc2uwsS5GMAl5hArqIKC41tF6C4TXNMu+g== =PjxJ -----END PGP SIGNATURE-----
participants (3)
-
Christina Klam -
Lou Katz -
Matt F