Bug 363264

Comment 1 Satyam Kandula 2011-11-09 03:22:03 EST

Created attachment 206652 [details]
Trace output

Comment 2 Lakshmi P Shanmugam 2011-11-09 03:53:43 EST

output of traceroute to port 22:

traceroute to git.eclipse.org (206.191.52.44), 64 hops max, 52 byte packets
 1  9.124.33.3 (9.124.33.3)  4.575 ms  1.305 ms  1.433 ms
 2  9.182.168.129 (9.182.168.129)  0.759 ms  0.735 ms  0.787 ms
 3  9.182.168.2 (9.182.168.2)  0.746 ms  0.761 ms  0.783 ms
 4  9.182.166.6 (9.182.166.6)  0.399 ms  0.368 ms  0.344 ms
 5  9.182.116.3 (9.182.116.3)  3.439 ms  1.725 ms  2.553 ms
 6  122.248.161.66 (122.248.161.66)  1.362 ms  1.426 ms  1.864 ms
 7  32.114.242.29 (32.114.242.29)  237.657 ms  98.223 ms  182.496 ms
 8  12.122.146.81 (12.122.146.81)  232.399 ms  232.383 ms  234.665 ms
 9  * * *
10  * * *
11  66.46.220.198 (66.46.220.198)  300.529 ms  301.425 ms  300.859 ms
12  gateway2-vlan96.magma.ca (209.217.64.57)  301.839 ms  302.278 ms  302.402 ms
13  206.191.0.111 (206.191.0.111)  301.035 ms  301.099 ms  301.430 ms
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *

Comment 3 Satyam Kandula 2011-11-09 05:19:21 EST

It is working now. Did the block expire? Is the block for 24 hours? 

However, I think something should be done for this. They are some issues with Egit where people don't know the problem is with password causing everybody else in the domain to suffer.

Comment 4 Denis Roy 2011-11-09 09:08:02 EST

I will need your external-facing IP address from a site like http://whatismyip.org

You can email it to webmaster@eclipse.org if you want to keep it private.  And yes, a subnet block is only for an hour (after which, if bad logins persist, the block will be longer).

Comment 5 Satyam Kandula 2011-11-09 23:17:16 EST

(In reply to comment #4)
> I will need your external-facing IP address from a site like
> http://whatismyip.org
> 
> You can email it to webmaster@eclipse.org if you want to keep it private.  And
> yes, a subnet block is only for an hour (after which, if bad logins persist,
> the block will be longer).
I have sent an email with our external IP. Can you please see that if we were indeed blocked? We faced the blockage for almost 24 hours, without anybody really accessing anything with anybody really accessing it during much of the time.

Comment 6 Eclipse Webmaster 2011-11-10 09:34:24 EST

There was a block but it expired.  The root cause was multiple password failures.

-M.

Comment 7 Deepak Azad 2011-11-10 09:52:49 EST

I do not recall an incident from CVS days where a domain was blocked, however this happened at least twice with Git in the last month, see also bug 361664. Just to make sure that this is not a git.eclipse.org issue, were the number of bad password attempts lowered in recent past ?

Comment 8 Remy Suen 2011-11-10 09:56:57 EST

(In reply to comment #7)
> I do not recall an incident from CVS days where a domain was blocked, however
> this happened at least twice with Git in the last month, see also bug 361664.
> Just to make sure that this is not a git.eclipse.org issue, were the number of
> bad password attempts lowered in recent past ?

I think you guys want bug 356233.

Comment 9 Denis Roy 2011-11-10 10:02:19 EST

(In reply to comment #5)
> I have sent an email with our external IP. Can you please see that if we were
> indeed blocked? We faced the blockage for almost 24 hours, without anybody
> really accessing anything with anybody really accessing it during much of the
> time.


Matt, if it makes sense and the netblock belongs to IBM, please consider adding it to the white list.

Comment 10 Eclipse Webmaster 2011-11-10 13:50:02 EST

(In reply to comment #9)

> Matt, if it makes sense and the netblock belongs to IBM, please consider adding
> it to the white list.

Done.

-M.

Comment 11 Deepak Azad 2011-11-10 19:51:23 EST

Thanks!