[outages] Fwd: Undeliverable: Re: .org whois outage?

Mon Sep 12 02:10:31 EDT 2016

Mailman must be set up wrong for outages.  I'm getting bounce messages from
a handful of users like this one.

-A

---------- Forwarded message ----------
From: <postmaster at cogetel.com.kh>
Date: Sun, Sep 11, 2016 at 11:05 PM
Subject: Undeliverable: Re: [outages] .org whois outage?
To: aaron at heyaaron.com

*Delivery has failed to these recipients or groups:*

reamea.chey at cogetel.com.kh
A problem occurred during the delivery of this message. Please try to
resend the message later. If the problem continues, contact your helpdesk.

The following organization rejected your message: red.cogetel.com.kh.

*Diagnostic information for administrators:*

Generating server: cogetel.com.kh

reamea.chey at cogetel.com.kh
red.cogetel.com.kh #554 5.4.6 Hop count exceeded - possible mail loop ##

Original message headers:

AE9vXwOcJC/4u2M0bC/14aBvWsdCZvvJUUqZdovO1ZoFkGibHdg06F+ca0c7I0bO/H4PjJc80T3G5AmsVPFu435Y
X-Received: by 10.157.11.104 with SMTP id p37mr11750000otd.132.1473531756158;
 Sat, 10 Sep 2016 11:22:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.13.69 with HTTP; Sat, 10 Sep 2016 11:22:20 -0700 (PDT)
In-Reply-To: <20160910182138.GA28041 at icarus.home.lan>
References: <CAEE+rGrdSrBgD-pitNaaiH90_uEPFQ1B3fp2s58iGTjRgWNHXQ at mail.gmail.com>
 <20160910182138.GA28041 at icarus.home.lan>
Date: Sat, 10 Sep 2016 11:22:20 -0700
Message-ID: <CAEE+rGo=Z1dBVU-3T3+Y2wSJStN62kdcnEZf5LBPvjUaz_Re4g at mail.gmail.com>
To: Jeremy Chadwick <jdc at koitsu.org>
Subject: Re: [outages] .org whois outage?
X-BeenThere: outages at outages.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Outages \(planned & unplanned\) Reporting." <outages.outages.org>
List-Unsubscribe: <https://puck.nether.net/mailman/options/outages>,
 <mailto:outages-request at outages.org?subject=unsubscribe>
List-Archive: <https://puck.nether.net/pipermail/outages/>
List-Post: <mailto:outages at outages.org>
List-Help: <mailto:outages-request at outages.org?subject=help>
List-Subscribe: <https://puck.nether.net/mailman/listinfo/outages>,
 <mailto:outages-request at outages.org?subject=subscribe>
From: "Aaron C. de Bruyn via Outages" <outages at outages.org>
Reply-To: "Aaron C. de Bruyn" <aaron at heyaaron.com>
CC: <outages at outages.org>
Content-Type: multipart/mixed;
	boundary="===============5405249895932320106=="
Errors-To: outages-bounces at outages.org
Sender: Outages <outages-bounces at outages.org>
X-AntiVirus: checked by Vexira MailArmor

Final-Recipient: rfc822;reamea.chey at cogetel.com.kh
Action: failed
Status: 5.4.6
Diagnostic-Code: smtp;554 5.4.6 Hop count exceeded - possible mail loop
Remote-MTA: dns;red.cogetel.com.kh

---------- Forwarded message ----------
From: "Aaron C. de Bruyn via Outages" <outages at outages.org>
To: Jeremy Chadwick <jdc at koitsu.org>
Cc: <outages at outages.org>
Date: Sat, 10 Sep 2016 11:22:20 -0700
Subject: Re: [outages] .org whois outage?
Appears to be back online now.

-A

On Sat, Sep 10, 2016 at 11:21 AM, Jeremy Chadwick <jdc at koitsu.org> wrote:

> Can confirm.  On FreeBSD using native base system whois:
>
> $ truss -f whois koitsu.org
> ...
> 28050: socket(PF_INET,SOCK_DGRAM,17)             = 3 (0x3)
> 28050: connect(3,{ AF_INET 199.15.84.131:1 },16) = 0 (0x0)
> 28050: getsockname(3,{ AF_INET 192.168.1.51:32474 },0x7fffffffe61c) = 0
> (0x0)
> 28050: close(3)                                  = 0 (0x0)
> 28050: socket(PF_INET,SOCK_STREAM,6)             = 3 (0x3)
> ^C28050: connect(3,{ AF_INET 199.15.84.131:43 },16) ERR#4 'Interrupted
> system call'
> 28050: SIGNAL 2 (SIGINT)
> 28050: process exit, rval = 0
>
> It appears 199.15.84.131 isn't responding on TCP port 43 (WHOIS service
> port):
>
> 11:17:48.119258 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq
> 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val
> 2452140445 ecr 0], length 0
> 11:17:51.118877 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq
> 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val
> 2452143445 ecr 0], length 0
> 11:17:54.318888 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq
> 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val
> 2452146645 ecr 0], length 0
>
> Wondering where that IP comes from?  It's org.whois-servers.net, a.k.a.
> whois.publicinterestregistry.net:
>
> $ host org.whois-servers.net.
> org.whois-servers.net is an alias for whois.publicinterestregistry.net.
> whois.publicinterestregistry.net has address 199.15.84.131
> whois.publicinterestregistry.net has IPv6 address 2001:500:106::17:12
>
> I don't use IPv6, so I can only confirm IPv4.
>
> --
> | Jeremy Chadwick                                   jdc at koitsu.org |
> | UNIX Systems Administrator                http://jdc.koitsu.org/ |
> | Making life hard for others since 1977.             PGP 4BD6C0CB |
>
> On Sat, Sep 10, 2016 at 10:53:53AM -0700, Aaron C. de Bruyn via Outages
> wrote:
> > I've tried running a few whois queries in the .org domain over the last
> few
> > minutes and I'm getting "connect: Network is unreachable".
> >
> > I tried from a few websites (Godaddy, namecheap, gkg, etc...) and their
> web
> > apps all break, return blank responses, etc...
> >
> > Anyone else seeing the same thing?
> >
> > -A
>
> > _______________________________________________
> > Outages mailing list
> > Outages at outages.org
> > https://puck.nether.net/mailman/listinfo/outages
>
>

_______________________________________________
Outages mailing list
Outages at outages.org
https://puck.nether.net/mailman/listinfo/outages
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages/attachments/20160911/2ee11133/attachment.htm>