Having IP problems with DH again.

Driver 7 · May 6, 2005, 04:49 AM

Hey boys.

I am having IP troubles again and have not been to get DH from my IP for 2 days now. I remember we had this happen before. If someone could please hood a brother back up, it would be super good. Sux not having a home page to open with my browser.

Here's my IP.

EDITED BY ZARDON FOR SECURITY REASONS.

In order to post this I connected remotely to my Joint Op's game server. I had never used it so surf the net. It lives at a data centre a block from my house. So I figgured while I was connected I would swing by DSL Reports and see just what the speeds were like over there.

LOL. I almost fell outa my chair. I wish I could get these speeds at my house.

44457/19531 Thats a 5557.1 KB/sec transfer rate,

Thats incredable.

***Zardon*** · May 6, 2005, 08:01 AM

No idea what the problem is, give it a day or two for routing to settle, ive had a few emails lately from people not being able to access the site.

Also dont hammer the server if you are refreshing, the server is set to antidos with too many instantaneous connections.

Driver 7 · May 6, 2005, 05:04 PM

I just went through my my posts and found the thread. It was last July and was firewall related I think. Problems accessing DH

My IP was changed when our internet was upgraded about a month ago.

Actually. The vary last time DH worked for me, I sent you a PM, and cleaned up any old messages that I had. Has not worked since.

Driver 7 · May 9, 2005, 07:55 PM

I am going on day 5 of having a blank home page.

I need my DH fix.

Any sign of what the problem could be yet?

***craig5320*** · May 9, 2005, 08:02 PM

There's no problem DH side, as there's been over a thousand users a day on here, and only you reporting any issues.

I'd run a tracert to dh and see where the line is dropping out.

Run->cmd->tracert driverheaven.net

CDsDontBurn · May 9, 2005, 08:09 PM

i'm having the same problem, and it's also been about 5 days. Right now i am posting from work, and that is how i have been able to post here. I've done a DNS flush, tracert, and used a couple of public proxy servers and still nothing. I asked a friend of mine who has a different ISP and has never been on DH to check to see if it works on her computer, and it doesn't.

I don't know what the problem is.

Driver 7 · May 9, 2005, 08:33 PM

Well I am quite sure the problem is not comming from here. I dont have problems connecting to any other website. May be it is. I dont know. If you look at the link I posted in the 3rd post. This happened once before and you can see if you read the thread that Zardon did something and then the problem was corrected.

Anyway, I just transparently redirected any requests for *.driverheaven.net to a proxy machine running in a different netblock (64.40.98.0) that isn't blocked from accessing DH's address.

FYI - the broken link along the way is gphou-66-98-241-124.ev1.net, the last hop before 67.15.42.37 (www.driverheaven.net) all packets are silently dropped at that point. Googling the IP brnigs up all sorts of other people from various other EV1 homed websites whose sites can''t be reached from various places throughout the world. So I'd guess its the ISP's misconfigured router.

Traceroute from a machine that can reach it:

[root@ns3 ~]# tracepath www.driverheaven.net
1: mrfirewall.lush.com (64.40.98.175) 0.239ms pmtu 1500
1: r2.netnation.com (64.40.98.250) 0.663ms
2: netnation.com (64.40.98.251) asymm 1 0.725ms
3: 122.ATM2-0.GW1.VAN1.ALTER.NET (209.167.46.101) asymm 2 1.706ms
4: 0.so-1-0-0.XL1.VAN1.ALTER.NET (152.63.137.130) 1.371ms
5: 0.so-3-0-0.XL1.SCL2.ALTER.NET (152.63.48.90) 23.150ms
6: 0.so-6-0-0.BR1.SCL2.ALTER.NET (152.63.57.49) 22.409ms
7: 204.255.168.70 (204.255.168.70) 23.495ms
8: so-4-3-0.mpr4.sjc2.us.above.net (64.125.30.85) asymm 9 23.553ms
9: so-2-3-0.cr1.dfw2.us.above.net (64.125.29.50) 74.759ms
10: so-4-0-0.mpr1.iah1.us.above.net (64.125.31.37) 79.088ms
11: so-0-0-0.mpr2.iah1.us.above.net (64.125.31.62) asymm 12 122.731ms
12: t289.216-200-251-162.iah1.us.above.net (216.200.251.162) asymm 13 78.798ms
13: 66.98.241.29 (66.98.241.29) asymm 14 79.092ms
14: gphou-66-98-241-124.ev1.net (66.98.241.124) asymm 13 79.721ms
15: driverheaven.net (67.15.42.37) asymm 14 80.793ms reached
Resume: pmtu 1500 hops 15 back 14

and from my home machine which can't:

1: 24.82.175.206 (24.82.175.206) 7.185ms pmtu 1500
1: no reply
2: rd1wh-ge4-1-2.vc.shawcable.net (64.59.158.163) 14.223ms
3: rc1wh-pos15-0.vc.shawcable.net (66.163.69.34) 12.149ms
4: rc2wt-pos7-0.wa.shawcable.net (66.163.76.154) 13.813ms
5: ge-7-2-0.r04.sttlwa01.us.bb.verio.net (129.250.10.157) asymm 6 22.859ms
6: p16-0-1-0.r21.sttlwa01.us.bb.verio.net (129.250.2.236) 14.123ms
7: p16-1-1-1.r21.plalca01.us.bb.verio.net (129.250.2.49) asymm 8 48.169ms
8: p16-3-0-0.r02.hstntx01.us.bb.verio.net (129.250.2.2) asymm 12 86.416ms
9: ge-6.ev1.hstntx01.us.bb.verio.net (129.250.10.190) asymm 13 86.671ms
10: 66.98.241.28 (66.98.241.28) asymm 15 85.682ms
11: gphou-66-98-241-124.ev1.net (66.98.241.124) asymm 10 83.681ms
12: no reply
.....
31: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500

Definately places the problem at "that end" as the dropping machine is the last hop before DH's IP.

***Zardon*** · May 10, 2005, 03:29 AM

ill contact our host about this now.

If you can PM the IPS that wont resolve the server and if you know others please do so with them as well. The more information I have to pass on, the better.

thanks.

***Zardon*** · May 10, 2005, 03:30 AM

Quote:

Originally Posted by CDsDontBurn

i'm having the same problem, and it's also been about 5 days. Right now i am posting from work, and that is how i have been able to post here. I've done a DNS flush, tracert, and used a couple of public proxy servers and still nothing. I asked a friend of mine who has a different ISP and has never been on DH to check to see if it works on her computer, and it doesn't.

I don't know what the problem is.

Get me IPs. this information is no good to the host without IPs, and do the same as driver7 did, run a traceback.

Son_of_Thunder · May 10, 2005, 04:02 AM

i don't know if this helps or not, but i was one of the people who tried to figure out how to get cds back on here. so i may be able to give you more info than he did in his one post.

i can tell you that we both ran the tracert, he did it first to see which server it timed out on and we found that it was the same one as above (66.98.241.124) i then said "yep, i bet that server is down and your isp hasn't figured out a new route to get to DH. i bet if i ran a tracert that server wouldn't be on my list"

when i ran the tracert i was suprised to see that it was on my list. i also had another friend run a tracert, we both found that it was the hop right before DH, and unlike cds, we both got a response from it.

***Zardon*** · May 10, 2005, 07:03 AM

ive been talking to the host, they want IPS of people who cant get onto the site, so they can try a trace, all I can tell them atm is its people on the west coast who seem most affected.

if anyone reading this knows anyone who cant get on the site without using a proxy, please email me their ip and a trace result.

***Zardon*** · May 10, 2005, 11:56 AM

seems our firewall has stopped quite a few attacks recently, several of these have almost identical IPS to the people in this thread.

investigating.

CDsDontBurn · May 10, 2005, 02:15 PM

Quote:

Originally Posted by Zardon

Get me IPs. this information is no good to the host without IPs, and do the same as driver7 did, run a traceback.

i have a dynamic IP address at my home computer, so my IP address keeps changing. I don't know how often it does change though. When i get home i can email you my current IP address.

CDsDontBurn · May 10, 2005, 02:55 PM

this is what i get here at work, i don't know why it's like that but it works

.

I'll do another tracert at home and i'll have Son_of_Thunder put up the .jpg up for me.

***Zardon*** · May 10, 2005, 07:29 PM

ok after investigation the IPS you guys have gave me have been automatically blocked by the driverheaven firewall (hence the total lack of access) due to Lv3 and Lv4 attacks on the site. im unwilling to unblock these for obvious reasons, so have you anything to tell me?

Driver 7 · May 10, 2005, 09:45 PM

Well I hope you don't think that I might have some reason for attacking Driver Heaven. I have never in my life done something to hurt another. In fact I often have a hard time with all of the crap and completely unnecessary, hurtful things that people do to others on a daily basis. Weather it's stories from the headlines or drama from friends and family. So needless to say, if I for some reason had issues with you or any of the DH Crew, even if I was hella pissed at someone, anything of that nature would be the absolute furthest thing from my mind.

Also let me say here that I am not really sure what a Lv3 and a Lv4 attack is so I really do not know what I am defending myself against. But all the same, I will finish what I got to say and if it's not enough to convince you. Then I promise I will never return again.

I have been a proud member of DH for around 2 to 3 years, Posted news for a little while, Donated, and found the forum to really be the only forum with an atmosphere that's comfortable enough to keep coming back to. If you take a look at the link in my signature for my rig. I believe there is something written about how much I like DH. It was a year or so since I made the small shrine for my PC so I can't remember exactly what it says.

Also, I started a website last August for my gaming squad. One of the very first things I did when I was putting the site together was make a little graphic for DH and post links. They are still there and I will never take them down. When any of the 100+ squad members come to me for tech support for there PC's, I often have directed them to either the DH forums or to driver cleaner or whatever else.

I know that we have never met in person. And could be talking out my ass right know for all you know. But I assure you I have no anterior motives or hidden agendas. I would think that between the time I became a member and now, anyone who I have interacted with here time and time again would have a hard time believing I might attack Driver Heaven.

The only other thing I have to say is, As I posted a few posts back. The very last thing I did before my IP was blocked was send you a PM. That was like Wednesday or Thursday night and then I went to bed. Then when I got up the next day I did the same thing I do every single day. Went for coffee and then sat down at my PC to see the morning news stories. My browsers home page has been DH for over 2 years so the first place I read the headlines is obviously DH. That was when I noticed for the first time that there was no DH. I don't know if you got my PM or not but that was probably when your firewall made the mistake or whatever it is that happened went down.

My PM by the way, was to check with you and see if it would be OK to post a job opening at my better halfs work for an Information Technology Support person. Not because there are a lack of people to employ but because I know first hand how qualified some people that can be found within the forums here are and Also because I thought if anyone here was in need of a Job, it would be cool to be able to hook them up.

That's my case. I think it's good your cautious as there are people who do actually want to destroy some of the things that others find pleasure in. I hope you realize that I am not one of those people.

***Zardon*** · May 11, 2005, 04:10 AM

Relax Driver i wasnt accusing you of anything. an IP can be a proxy server from a host and many other variables, it doesnt mean you instigated it yourself. I was joking in the post in a tongue in cheek way.

However, the ips given to me have all shown in our firewall logs as maximum threat risks with attacks via MS-SQL: Slammer-Sapphire Worm and Nimda root exe attacks. these have came from the IP you gave me and several similar attacks came from the IPs cdsdontburn gave me. The server we have is pretty high spec and the firewall is set to do all these things automatically. It does a good job of it too, several times in the last month if it wasnt the site would be down under DOS attacks.

Right now as I said im unwilling to release these Ips in the firewall for obvious reasons.

Driver 7 · May 11, 2005, 05:42 AM

OK man. I would be heartbroken without a Driver Heaven in my life. Hence the defensiveness! I'm all hooked up with my redirection so I'm in no hurry. Just let me know if you do release it so I can bring it back. I myself am behind a really secure firewall that's running on a linux box, so my system is as safe as can be.

And while I have ya here, is it OK to post a job opening here. I can do it by not using any company names and just giving a fax #. If so, where should I post it.

***Zardon*** · May 11, 2005, 07:58 AM

well dont post a job opening in the feedback section, this is for site feedback.

if you want to offer a job opening in the off topic go on ahead, of course if everyone else starts doing it then we will have to remove them.

swatX · May 12, 2005, 02:31 AM

so you are saying you are unwilling to let people in the westcoast who are affected by this issue access your site.

i am right now using a proxy which is very slow and i want to access the site like i do normally through IE.

***Zardon*** · May 12, 2005, 03:25 AM

Quote:

Originally Posted by swatX

so you are saying you are unwilling to let people in the westcoast who are affected by this issue access your site.

Obviously you didnt read it.

I said I was unwilling to open IPs which have been behind lv3 and lv4 attacks on Driverheaven. It just seems most of these are coming from the west coast - maybe you americans have too much time on your hands

However ive made some alterations, try now.

swatX · May 12, 2005, 04:18 AM

awesome.. well i just wrote that to get you release the ips :P

thanks..