<div dir="ltr"><div>Mailman must be set up wrong for outages.  I'm getting bounce messages from a handful of users like this one.</div><div><br></div><div>-A</div><div><br></div><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername"></b> <span dir="ltr"><<a href="mailto:postmaster@cogetel.com.kh">postmaster@cogetel.com.kh</a>></span><br>Date: Sun, Sep 11, 2016 at 11:05 PM<br>Subject: Undeliverable: Re: [outages] .org whois outage?<br>To: <a href="mailto:aaron@heyaaron.com">aaron@heyaaron.com</a><br><br><br>
<div><span class="">
<p><b><font color="#000066" size="3" face="Arial">Delivery has failed to these recipients or groups:</font></b></p>
<font color="#000000" size="2" face="Tahoma"><p><a href="mailto:reamea.chey@cogetel.com.kh" target="_blank">reamea.chey@cogetel.com.kh</a><br>
A problem occurred during the delivery of this message. Please try to resend the message later. If the problem continues, contact your helpdesk.<br>
</p>
<p>The following organization rejected your message: <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>.</p>
</font>
<br><br><br><br><br><br>
</span><font color="#808080" size="2" face="Tahoma"><span class=""><p><b>Diagnostic information for administrators:</b></p>
<p>Generating server: <a href="http://cogetel.com.kh" target="_blank">cogetel.com.kh</a></p>
<p><a href="mailto:reamea.chey@cogetel.com.kh" target="_blank">reamea.chey@cogetel.com.kh</a><br>
<a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a> #554 5.4.6 Hop count exceeded - possible mail loop ##</p>
<p>Original message headers:</p>
</span><pre><span class="">Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a></span>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 12:46:48 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 12:28:15 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 12:09:37 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 11:50:14 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 11:26:53 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 11:07:04 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a><span class="">
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 10:41:20 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a></span>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 10:08:25 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 12 Sep
 2016 09:49:43 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Sun, 11 Sep
 2016 01:21:03 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Sun, 11 Sep
 2016 01:21:03 +0700
Received: from <a href="http://RED.cogetel.com.kh" target="_blank">RED.cogetel.com.kh</a> (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a>
 (192.168.1.172) with Microsoft SMTP Server (TLS) id 14.3.181.6; Sun, 11 Sep
 2016 01:21:02 +0700
Received: from red (192.168.1.170) by <a href="http://red.cogetel.com.kh" target="_blank">red.cogetel.com.kh</a> (192.168.1.170) with
 Microsoft SMTP Server id 14.3.181.6; Sun, 11 Sep 2016 01:21:02 +0700
Return-Path: <<a href="mailto:outages-bounces@outages.org" target="_blank">outages-bounces@outages.org</a>>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on <a href="http://mx04.online.com.kh" target="_blank">mx04.online.com.kh</a>
X-Spam-Level:
X-Spam-Status: No, score=-1.5 required=5.0 tests=BAYES_50,HTML_MESSAGE,
        NORMAL_HTTP_TO_IP,RCVD_IN_<wbr>DNSWL_MED,SPF_HELO_PASS,T_<wbr>DKIM_INVALID,WEIRD_PORT
        autolearn=no version=3.3.1
X-Original-To: <a href="mailto:reamea.chey@online.com.kh" target="_blank">reamea.chey@online.com.kh</a>
Delivered-To: <a href="mailto:reamea.chey@online.com.kh" target="_blank">reamea.chey@online.com.kh</a>
Received: from <a href="http://mx04.online.com.kh" target="_blank">mx04.online.com.kh</a> (<a href="http://mx04.online.com.kh" target="_blank">mx04.online.com.kh</a> [203.189.128.14]) by
 <a href="http://mx04.online.com.kh" target="_blank">mx04.online.com.kh</a> (Postfix) with SMTP id BF29C1E7862  for
 <<a href="mailto:reamea.chey@online.com.kh" target="_blank">reamea.chey@online.com.kh</a>>; Sun, 11 Sep 2016 01:23:55 +0700 (ICT)
Received: from <a href="http://puck.nether.net" target="_blank">puck.nether.net</a> (<a href="http://puck.nether.net" target="_blank">puck.nether.net</a> [204.42.254.5])       by
 <a href="http://mx04.online.com.kh" target="_blank">mx04.online.com.kh</a> (Postfix) with ESMTP id 3BD2537F2B  for
 <<a href="mailto:reamea.chey@azcom.net.kh" target="_blank">reamea.chey@azcom.net.kh</a>>; Sun, 11 Sep 2016 01:23:55 +0700 (ICT)
Received: from <a href="http://puck.nether.net" target="_blank">puck.nether.net</a> (localhost [IPv6:::1])      by <a href="http://puck.nether.net" target="_blank">puck.nether.net</a>
 (Postfix) with ESMTP id 27979540990;   Sat, 10 Sep 2016 14:23:47 -0400 (EDT)
X-Original-To: <a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>
Delivered-To: <a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>
Received: from <a href="http://mail-oi0-x22b.google.com" target="_blank">mail-oi0-x22b.google.com</a> (<a href="http://mail-oi0-x22b.google.com" target="_blank">mail-oi0-x22b.google.com</a>
 [IPv6:2607:f8b0:4003:c06::22b]<wbr>) (using TLSv1.2 with cipher
 ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested)
 by <a href="http://puck.nether.net" target="_blank">puck.nether.net</a> (Postfix) with ESMTPS id E143F54097A for
 <<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>>; Sat, 10 Sep 2016 14:22:36 -0400 (EDT)
Received: by <a href="http://mail-oi0-x22b.google.com" target="_blank">mail-oi0-x22b.google.com</a> with SMTP id d191so235490oih.2 for
 <<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>>; Sat, 10 Sep 2016 11:22:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=<a href="http://heyaaron.com" target="_blank">heyaaron.com</a>; s=google;
 h=mime-version:in-reply-to:<wbr>references:from:date:message-<wbr>id:subject:to
 :cc; bh=RavI9Zh4GzMRBs/<wbr>5a2hYm2MtmRpmAWzmsEMt+X5Po10=;
 b=<wbr>FHgs3sElXNJ8sEQcgcslTwc0bid3W3<wbr>GPPVzOuRyAJYs4JPW/0DoCks8rM+<wbr>YL3bTr1i
 5mI7zN3ZV/<wbr>ufMAq29fNRd5sNVXiDROL8Xj7MWTHb<wbr>+U6EHOLKA9UtLUe40iekX8YQLx6f
 QSOo0G4UWXhzdWSUvmGDvaD47yJkg/<wbr>/SSd2OE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=<a href="http://1e100.net" target="_blank">1e100.net</a>; s=20130820;
 h=x-gm-message-state:mime-<wbr>version:in-reply-to:<wbr>references:from:date
 :message-id:subject:to:cc;
 bh=RavI9Zh4GzMRBs/<wbr>5a2hYm2MtmRpmAWzmsEMt+X5Po10=;
 b=msucx6rRy6uQvrUOR/7Vo+<wbr>ISSKJQvqapWAQKJ7VzKiW4ZfvrwQ26<wbr>zqhFLzY3UGv563
 CW6FeNAGAOI0e07osad/<wbr>3J2rIbMJfxmQZpPQ8w3/<wbr>epW723JQQQqOzypPRyTAA1hh0M8q
 dsQqsNvvmBe4dN8MEAzD3te/<wbr>4nX30UgZiSCb6/<wbr>FKUUgqAcjeGVMV8vgZ9zvhc2vAYXNv
 FadEFYMavaiySaAR2SGbBGw2n0SoCo<wbr>v52XGP0yU5HBQ3J7gyulmG0968Eq+<wbr>2aTD6kY/A
 nhsAVUtjRUi+<wbr>lYCV2X95vClPJeq4pEQgl5AhHg27KF<wbr>f9pqEz7UGnXSgWDVMeYQgHkM9W
 BuYA==
X-Gm-Message-State: AE9vXwOcJC/4u2M0bC/<wbr>14aBvWsdCZvvJUUqZdovO1ZoFkGibH<wbr>dg06F+ca0c7I0bO/<wbr>H4PjJc80T3G5AmsVPFu435Y
X-Received: by 10.157.11.104 with SMTP id p37mr11750000otd.132.<wbr>1473531756158; 
 Sat, 10 Sep 2016 11:22:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.13.69 with HTTP; Sat, 10 Sep 2016 11:22:20 -0700 (PDT)
In-Reply-To: <20160910182138.GA28041@<wbr>icarus.home.lan>
References: <<a href="mailto:CAEE%2BrGrdSrBgD-pitNaaiH90_uEPFQ1B3fp2s58iGTjRgWNHXQ@mail.gmail.com" target="_blank">CAEE+rGrdSrBgD-pitNaaiH90_<wbr>uEPFQ1B3fp2s58iGTjRgWNHXQ@<wbr>mail.gmail.com</a>>
 <20160910182138.GA28041@<wbr>icarus.home.lan>
Date: Sat, 10 Sep 2016 11:22:20 -0700
Message-ID: <CAEE+rGo=<a href="mailto:Z1dBVU-3T3%2BY2wSJStN62kdcnEZf5LBPvjUaz_Re4g@mail.gmail.com" target="_blank">Z1dBVU-3T3+<wbr>Y2wSJStN62kdcnEZf5LBPvjUaz_<wbr>Re4g@mail.gmail.com</a>>
To: Jeremy Chadwick <<a href="mailto:jdc@koitsu.org" target="_blank">jdc@koitsu.org</a>>
Subject: Re: [outages] .org whois outage?
X-BeenThere: <a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a><span class="">
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Outages \(planned & unplanned\) Reporting." <<a href="http://outages.outages.org" target="_blank">outages.outages.org</a>>
List-Unsubscribe: <<a href="https://puck.nether.net/mailman/options/outages" target="_blank">https://puck.nether.net/<wbr>mailman/options/outages</a>>,
 <mailto:<a href="mailto:outages-request@outages.org" target="_blank">outages-request@<wbr>outages.org</a>?subject=<wbr>unsubscribe>
List-Archive: <<a href="https://puck.nether.net/pipermail/outages/" target="_blank">https://puck.nether.net/<wbr>pipermail/outages/</a>>
List-Post: <mailto:<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>>
List-Help: <mailto:<a href="mailto:outages-request@outages.org" target="_blank">outages-request@<wbr>outages.org</a>?subject=help>
List-Subscribe: <<a href="https://puck.nether.net/mailman/listinfo/outages" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/outages</a>>,
 <mailto:<a href="mailto:outages-request@outages.org" target="_blank">outages-request@<wbr>outages.org</a>?subject=subscribe>
From: "Aaron C. de Bruyn via Outages" <<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>>
Reply-To: "Aaron C. de Bruyn" <<a href="mailto:aaron@heyaaron.com" target="_blank">aaron@heyaaron.com</a></span>>
CC: <<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>>
Content-Type: multipart/mixed;
        boundary="===============<wbr>5405249895932320106=="
Errors-To: <a href="mailto:outages-bounces@outages.org" target="_blank">outages-bounces@outages.org</a><span class="">
Sender: Outages <<a href="mailto:outages-bounces@outages.org" target="_blank">outages-bounces@outages.org</a>>
X-AntiVirus: checked by Vexira MailArmor
</span></pre>
</font>
</div>
<br>Final-Recipient: <a href="mailto:rfc822%3Breamea.chey@cogetel.com.kh">rfc822;reamea.chey@cogetel.<wbr>com.kh</a><br>
Action: failed<br>
Status: 5.4.6<br>
Diagnostic-Code: smtp;554 5.4.6 Hop count exceeded - possible mail loop<br>
Remote-MTA: dns;<a href="http://red.cogetel.com.kh" rel="noreferrer" target="_blank">red.cogetel.com.kh</a><br>
<br>
<br><br>---------- Forwarded message ----------<br>From: "Aaron C. de Bruyn via Outages" <<a href="mailto:outages@outages.org">outages@outages.org</a>><br>To: Jeremy Chadwick <<a href="mailto:jdc@koitsu.org">jdc@koitsu.org</a>><br>Cc: <<a href="mailto:outages@outages.org">outages@outages.org</a>><br>Date: Sat, 10 Sep 2016 11:22:20 -0700<br>Subject: Re: [outages] .org whois outage?<br><div dir="ltr">Appears to be back online now.<div><br></div><div>-A</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Sep 10, 2016 at 11:21 AM, Jeremy Chadwick <span dir="ltr"><<a href="mailto:jdc@koitsu.org" target="_blank">jdc@koitsu.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Can confirm.  On FreeBSD using native base system whois:<br>
<br>
$ truss -f whois <a href="http://koitsu.org" rel="noreferrer" target="_blank">koitsu.org</a><br>
...<br>
28050: socket(PF_INET,SOCK_DGRAM,17)             = 3 (0x3)<br>
28050: connect(3,{ AF_INET <a href="http://199.15.84.131:1" rel="noreferrer" target="_blank">199.15.84.131:1</a> },16) = 0 (0x0)<br>
28050: getsockname(3,{ AF_INET <a href="http://192.168.1.51:32474" rel="noreferrer" target="_blank">192.168.1.51:32474</a> },0x7fffffffe61c) = 0 (0x0)<br>
28050: close(3)                                  = 0 (0x0)<br>
28050: socket(PF_INET,SOCK_STREAM,6)             = 3 (0x3)<br>
^C28050: connect(3,{ AF_INET <a href="http://199.15.84.131:43" rel="noreferrer" target="_blank">199.15.84.131:43</a> },16) ERR#4 'Interrupted system call'<br>
28050: SIGNAL 2 (SIGINT)<br>
28050: process exit, rval = 0<br>
<br>
It appears 199.15.84.131 isn't responding on TCP port 43 (WHOIS service<br>
port):<br>
<br>
11:17:48.119258 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452140445 ecr 0], length 0<br>
11:17:51.118877 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452143445 ecr 0], length 0<br>
11:17:54.318888 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452146645 ecr 0], length 0<br>
<br>
Wondering where that IP comes from?  It's <a href="http://org.whois-servers.net" rel="noreferrer" target="_blank">org.whois-servers.net</a>, a.k.a.<br>
<a href="http://whois.publicinterestregistry.net" rel="noreferrer" target="_blank">whois.publicinterestregistry.n<wbr>et</a>:<br>
<br>
$ host <a href="http://org.whois-servers.net" rel="noreferrer" target="_blank">org.whois-servers.net</a>.<br>
<a href="http://org.whois-servers.net" rel="noreferrer" target="_blank">org.whois-servers.net</a> is an alias for <a href="http://whois.publicinterestregistry.net" rel="noreferrer" target="_blank">whois.publicinterestregistry.n<wbr>et</a>.<br>
<a href="http://whois.publicinterestregistry.net" rel="noreferrer" target="_blank">whois.publicinterestregistry.n<wbr>et</a> has address 199.15.84.131<br>
<a href="http://whois.publicinterestregistry.net" rel="noreferrer" target="_blank">whois.publicinterestregistry.n<wbr>et</a> has IPv6 address 2001:500:106::17:12<br>
<br>
I don't use IPv6, so I can only confirm IPv4.<br>
<br>
--<br>
| Jeremy Chadwick                                   <a href="mailto:jdc@koitsu.org" target="_blank">jdc@koitsu.org</a> |<br>
| UNIX Systems Administrator                <a href="http://jdc.koitsu.org/" rel="noreferrer" target="_blank">http://jdc.koitsu.org/</a> |<br>
| Making life hard for others since 1977.             PGP 4BD6C0CB |<br>
<div><div><br>
On Sat, Sep 10, 2016 at 10:53:53AM -0700, Aaron C. de Bruyn via Outages wrote:<br>
> I've tried running a few whois queries in the .org domain over the last few<br>
> minutes and I'm getting "connect: Network is unreachable".<br>
><br>
> I tried from a few websites (Godaddy, namecheap, gkg, etc...) and their web<br>
> apps all break, return blank responses, etc...<br>
><br>
> Anyone else seeing the same thing?<br>
><br>
> -A<br>
<br>
</div></div>> ______________________________<wbr>_________________<br>
> Outages mailing list<br>
> <a href="mailto:Outages@outages.org" target="_blank">Outages@outages.org</a><br>
> <a href="https://puck.nether.net/mailman/listinfo/outages" rel="noreferrer" target="_blank">https://puck.nether.net/mailma<wbr>n/listinfo/outages</a><br>
<br>
</blockquote></div><br></div>
<br>______________________________<wbr>_________________<br>
Outages mailing list<br>
<a href="mailto:Outages@outages.org">Outages@outages.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/outages" rel="noreferrer" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/outages</a><br>
<br></div><br></div>