Gary McLean
Gary.McLean@instinet.co.uk
Fri, 1 Jun 2007 10:46:59 +0100
This is a multipart message in MIME format. --=_alternative 0035B448802572ED_= Content-Type: text/plain; charset="US-ASCII" Content-Disposition: inline Hey Rob, This may be a stupid question but a starting point, but is the UDP Port 6277 open outbound on your firewall? As you see on my mail server, you get a UDP Packet back. [root@bstpmail01 ~]# tcpdump port 6277 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 10:43:16.686540 IP bstpmail01.instinet.co.uk.43155 > birubiru.to.infn.it.6277: UDP, length 206 10:43:16.805724 IP birubiru.to.infn.it.6277 > bstpmail01.instinet.co.uk.43155: UDP, length 112 Gary "Robert Welz" Sent by: dcc-admin@rhyolite.com 01/06/2007 10:26 To dcc@rhyolite.com cc Subject dcc not working Hello! I can't get dcc working. My email traffic is at about 3500 email/day so I choose the list as a last mean seeking for help. Can you help please, maybe I am blocked upstream somehow? Greetings, Robert I can see outgoing traffic from my gateway but no answer packets: tcpdump -i ppp0 port not 25 and port not 80 and port not 22 and port not 53 and port not 37 and port not 123 14:24:48.753740 IP LB-F1.DTAG.DE > www.fixe-post.de: ICMP LB- F1.DTAG.DE udp port domain unreachable, length 36 14:28:34.561453 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:34.561487 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:34.561671 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:34.561793 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:34.561920 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:34.562044 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:34.562169 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:34.562296 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:34.562547 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:34.562571 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:34.562796 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:34.918985 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:34.919019 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:34.919039 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:34.919058 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:34.919077 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:34.919099 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:34.919121 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:34.919142 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:34.919161 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:34.919196 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:34.919297 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:35.519030 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:35.519058 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:35.519079 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:35.519097 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:35.519116 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:35.519138 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:35.519156 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:35.519175 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:35.519218 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:35.519292 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:35.519310 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:36.629060 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:36.629103 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:36.629135 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:36.629166 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:36.629214 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:36.629245 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:36.629291 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:36.629322 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:36.629354 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:36.629404 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:36.629433 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 >> May 27 14:25:14 Nausciaa dccproc[4560]: continue not asking DCC 47 seconds after failure May 27 14:28:38 Nausciaa dccproc[4569]: continue not asking DCC 2048 seconds after failure and cdcc info sagt mir Nausciaa log # cdcc info # 05/27/07 14:18:08 CEST /var/dcc/map # Re-resolve names after 14:43:01 # 12 total, 0 working servers # skipping asking DCC server 473 seconds more # 499 dccproc balance since 14:18:04 IPv6 off dcc1.dcc-servers.net,- RTT+1000 ms anon # 137.208.8.26,- # not answering # 142.27.70.214,- # not answering # 152.20.253.5,- # not answering dcc2.dcc-servers.net,- RTT+1000 ms anon # 209.34.225.42,- # not answering # 216.240.97.12,- # not answering dcc3.dcc-servers.net,- RTT+1000 ms anon # 64.124.52.232,- # not answering # 208.201.249.233,- # not answering dcc4.dcc-servers.net,- RTT+1000 ms anon # 194.228.41.13,- # not answering # 216.134.200.215,- # not answering dcc5.dcc-servers.net,- RTT+1000 ms anon # 136.199.199.102,- # not answering # 208.201.249.232,- # not answering 127.0.0.1,- RTT-1000 ms 32768 394941540y648 # 127.0.0.1,- # not answering ################ # 05/27/07 14:18:08 CEST GreyList /var/dcc/map # Re-resolve names after 16:11:26 # 1 total, 0 working servers # skipping asking Greylist server 43 seconds more 127.0.0.1,- Greylist 32768 394941540y648 # 127.0.0.1,6276 # not answering _______________________________________________ DCC mailing list DCC@rhyolite.com http://www.rhyolite.com/mailman/listinfo/dcc -- Disclaimer This message contains confidential information and is intended only for the named individual. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this message in error and delete this e-message from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed in transmission, incomplete, or may contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments. --=_alternative 0035B448802572ED_= Content-Type: text/html; charset="US-ASCII" Content-Disposition: inline <br><font size=2 face="sans-serif">Hey Rob,</font> <br> <br><font size=2 face="sans-serif">This may be a stupid question but a starting point, but is the UDP Port 6277 open outbound on your firewall?</font> <br> <br><font size=2 face="sans-serif">As you see on my mail server, you get a UDP Packet back.</font> <br> <br><font size=2 face="sans-serif">[root@bstpmail01 ~]# tcpdump port 6277</font> <br><font size=2 face="sans-serif">tcpdump: verbose output suppressed, use -v or -vv for full protocol decode</font> <br><font size=2 face="sans-serif">listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes</font> <br><font size=2 face="sans-serif">10:43:16.686540 IP bstpmail01.instinet.co.uk.43155 > birubiru.to.infn.it.6277: UDP, length 206</font> <br><font size=2 face="sans-serif">10:43:16.805724 IP birubiru.to.infn.it.6277 > bstpmail01.instinet.co.uk.43155: UDP, length 112</font> <br> <br><font size=2 face="sans-serif">Gary</font> <br> <br> <br> <table width=100%> <tr valign=top> <td width=40%><font size=1 face="sans-serif"><b>"Robert Welz" </b> </font> <br><font size=1 face="sans-serif">Sent by: dcc-admin@rhyolite.com</font> <p><font size=1 face="sans-serif">01/06/2007 10:26</font> <td width=59%> <table width=100%> <tr valign=top> <td> <div align=right><font size=1 face="sans-serif">To</font></div> <td><font size=1 face="sans-serif">dcc@rhyolite.com</font> <tr valign=top> <td> <div align=right><font size=1 face="sans-serif">cc</font></div> <td> <tr valign=top> <td> <div align=right><font size=1 face="sans-serif">Subject</font></div> <td><font size=1 face="sans-serif">dcc not working</font></table> <br> <table> <tr valign=top> <td> <td></table> <br></table> <br> <br> <br><tt><font size=2>Hello!<br> <br> I can't get dcc working. My email traffic is at about 3500 email/day so I<br> choose the list as a last mean seeking for help.<br> <br> Can you help please, maybe I am blocked upstream somehow?<br> <br> Greetings,<br> Robert<br> <br> <br> I can see outgoing traffic from my gateway but no answer packets:<br> <br> tcpdump -i ppp0 port not 25 and port not 80 and port not 22 and port<br> not 53 and port not 37 and port not 123<br> <br> 14:24:48.753740 IP LB-F1.DTAG.DE > www.fixe-post.de: ICMP LB-<br> F1.DTAG.DE udp port domain unreachable, length 36<br> 14:28:34.561453 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu.<br> 6277: UDP, length 40<br> 14:28:34.561487 IP Nausciaa.fixe-post.de.36172 > samantha.wu-<br> wien.ac.at.6277: UDP, length 40<br> 14:28:34.561671 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277:<br> UDP, length 40<br> 14:28:34.561793 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com.<br> 6277: UDP, length 40<br> 14:28:34.561920 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-001.ironhillhardware.com.6277: UDP, length 40<br> 14:28:34.562044 IP Nausciaa.fixe-post.de.36172 ><br> eth0.c.spam.sonic.net.6277: UDP, length 40<br> 14:28:34.562169 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net.<br> 6277: UDP, length 40<br> 14:28:34.562296 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-000.ironhillhardware.com.6277: UDP, length 40<br> 14:28:34.562547 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277:<br> UDP, length 40<br> 14:28:34.562571 IP Nausciaa.fixe-post.de.36172 ><br> eth0.d.spam.sonic.net.6277: UDP, length 40<br> 14:28:34.562796 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de.<br> 6277: UDP, length 40<br> 14:28:34.918985 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu.<br> 6277: UDP, length 40<br> 14:28:34.919019 IP Nausciaa.fixe-post.de.36172 > samantha.wu-<br> wien.ac.at.6277: UDP, length 40<br> 14:28:34.919039 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277:<br> UDP, length 40<br> 14:28:34.919058 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com.<br> 6277: UDP, length 40<br> 14:28:34.919077 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-001.ironhillhardware.com.6277: UDP, length 40<br> 14:28:34.919099 IP Nausciaa.fixe-post.de.36172 ><br> eth0.c.spam.sonic.net.6277: UDP, length 40<br> 14:28:34.919121 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net.<br> 6277: UDP, length 40<br> 14:28:34.919142 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-000.ironhillhardware.com.6277: UDP, length 40<br> 14:28:34.919161 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277:<br> UDP, length 40<br> 14:28:34.919196 IP Nausciaa.fixe-post.de.36172 ><br> eth0.d.spam.sonic.net.6277: UDP, length 40<br> 14:28:34.919297 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de.<br> 6277: UDP, length 40<br> 14:28:35.519030 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu.<br> 6277: UDP, length 40<br> 14:28:35.519058 IP Nausciaa.fixe-post.de.36172 > samantha.wu-<br> wien.ac.at.6277: UDP, length 40<br> 14:28:35.519079 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277:<br> UDP, length 40<br> 14:28:35.519097 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com.<br> 6277: UDP, length 40<br> 14:28:35.519116 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-001.ironhillhardware.com.6277: UDP, length 40<br> 14:28:35.519138 IP Nausciaa.fixe-post.de.36172 ><br> eth0.c.spam.sonic.net.6277: UDP, length 40<br> 14:28:35.519156 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net.<br> 6277: UDP, length 40<br> 14:28:35.519175 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-000.ironhillhardware.com.6277: UDP, length 40<br> 14:28:35.519218 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277:<br> UDP, length 40<br> 14:28:35.519292 IP Nausciaa.fixe-post.de.36172 ><br> eth0.d.spam.sonic.net.6277: UDP, length 40<br> 14:28:35.519310 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de.<br> 6277: UDP, length 40<br> 14:28:36.629060 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu.<br> 6277: UDP, length 40<br> 14:28:36.629103 IP Nausciaa.fixe-post.de.36172 > samantha.wu-<br> wien.ac.at.6277: UDP, length 40<br> 14:28:36.629135 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277:<br> UDP, length 40<br> 14:28:36.629166 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com.<br> 6277: UDP, length 40<br> 14:28:36.629214 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-001.ironhillhardware.com.6277: UDP, length 40<br> 14:28:36.629245 IP Nausciaa.fixe-post.de.36172 ><br> eth0.c.spam.sonic.net.6277: UDP, length 40<br> 14:28:36.629291 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net.<br> 6277: UDP, length 40<br> 14:28:36.629322 IP Nausciaa.fixe-post.de.36172 > dcc-<br> ns-000.ironhillhardware.com.6277: UDP, length 40<br> 14:28:36.629354 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277:<br> UDP, length 40<br> 14:28:36.629404 IP Nausciaa.fixe-post.de.36172 ><br> eth0.d.spam.sonic.net.6277: UDP, length 40<br> 14:28:36.629433 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de.<br> 6277: UDP, length 40<br> <br> >><br> May 27 14:25:14 Nausciaa dccproc[4560]: continue not asking DCC 47<br> seconds after failure<br> May 27 14:28:38 Nausciaa dccproc[4569]: continue not asking DCC 2048<br> seconds after failure<br> <br> <br> <br> and cdcc info sagt mir<br> Nausciaa log # cdcc info<br> # 05/27/07 14:18:08 CEST /var/dcc/map<br> # Re-resolve names after 14:43:01<br> # 12 total, 0 working servers<br> # skipping asking DCC server 473 seconds more<br> # 499 dccproc balance since 14:18:04<br> IPv6 off<br> <br> dcc1.dcc-servers.net,- RTT+1000 ms anon<br> # 137.208.8.26,-<br> # not answering<br> # 142.27.70.214,-<br> # not answering<br> # 152.20.253.5,-<br> # not answering<br> <br> dcc2.dcc-servers.net,- RTT+1000 ms anon<br> # 209.34.225.42,-<br> # not answering<br> # 216.240.97.12,-<br> # not answering<br> <br> dcc3.dcc-servers.net,- RTT+1000 ms anon<br> # 64.124.52.232,-<br> # not answering<br> # 208.201.249.233,-<br> # not answering<br> <br> dcc4.dcc-servers.net,- RTT+1000 ms anon<br> # 194.228.41.13,-<br> # not answering<br> # 216.134.200.215,-<br> # not answering<br> <br> dcc5.dcc-servers.net,- RTT+1000 ms anon<br> # 136.199.199.102,-<br> # not answering<br> # 208.201.249.232,-<br> # not answering<br> <br> 127.0.0.1,- RTT-1000 ms 32768 394941540y648<br> # 127.0.0.1,-<br> # not answering<br> <br> ################<br> # 05/27/07 14:18:08 CEST GreyList /var/dcc/map<br> # Re-resolve names after 16:11:26<br> # 1 total, 0 working servers<br> # skipping asking Greylist server 43 seconds more<br> <br> 127.0.0.1,- Greylist 32768 394941540y648<br> # 127.0.0.1,6276<br> # not answering<br> <br> <br> <br> <br> <br> <br> _______________________________________________<br> DCC mailing list DCC@rhyolite.com<br> http://www.rhyolite.com/mailman/listinfo/dcc<br> </font></tt> <br> <br> -- <hr><p> Disclaimer This message contains confidential information and is intended only for the named individual. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this message in error and delete this e-message from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed in transmission, incomplete, or may contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments. </p> --=_alternative 0035B448802572ED_=--