Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[tickmike]

https://forum.kitz.co.uk/index.php?topic=28277.90

I know a bit about networking but this has me baffled.

Never had any problems with access to my domain or emails before the move to his new server.

Access to  John's server (2hi.co.uk or 31.220.111.196) for my domain and emails keeps getting blocked but never blocked on my old ADSL2 connection.

My normal set up was FTTP through my pfSense box, ** it seemed that it was this box that was the cause so I took it out of use and configured a Linksys N300 router for my FTTP internet connection,
All worked well for a few days, then access to 2hi stopped.

** set up my ADSL2 connection through my pfSense box and it works fine.

Do you think it's my FTTP isp 'No One' that's blocking it.?

Is there networking checks I can do to find out what is going on.

Any Help Please.

[meritez]

I can't access either addresses and I run my own DNS servers 

[tubaman]

I can ping that on my BT connection by both IP and name so it may well be an ISP blocking issue.

[Chrysalis]

What do you mean by blocked?

I can access 2hi.co.uk in the web browser.

[jelv]

If you can't ping it do a tracert (or a pathping) which should help you identify here it is being blocked. If you have IPv6 you will need to force IPv4. This is what I get:

Code: [Select]

PS C:\Users\John> tracert -4 2hi.co.uk

Tracing route to 2hi.co.uk [31.220.111.196]
over a maximum of 30 hops:

  1     5 ms     9 ms     9 ms  fritz.box [192.168.1.1]
  2    17 ms    17 ms    17 ms  lo0-0.bng2.ixn-lon.zen.net.uk [51.148.77.129]
  3     *        *        *     Request timed out.
  4    16 ms    15 ms    14 ms  lag-1.br1.ixn-lon.zen.net.uk [51.148.73.181]
  5    17 ms    19 ms    14 ms  195.66.227.67
  6    23 ms    19 ms    18 ms  po50.er1.thn1.net.ans.uk [78.24.91.30]
  7    21 ms    20 ms    23 ms  po20.er1.man8.net.ans.uk [78.24.91.32]
  8    27 ms    20 ms    20 ms  po10.er2.man8.net.ans.uk [78.24.91.29]
  9    21 ms    20 ms    21 ms  po30.er2.man6.net.ans.uk [78.24.91.1]
 10    22 ms    20 ms    19 ms  46.37.183.131.srvlist.ukfast.net [46.37.183.131]
 11    25 ms    19 ms    18 ms  153.92.2.209
 12     *        *        *     Request timed out.
 13    20 ms    33 ms    19 ms  77.37.35.100
 14    20 ms    24 ms    19 ms  mail.2hi.co.uk [31.220.111.196]

Trace complete.
A non responsive line (like my line 12) with responses after just means that router doesn't respond to pings.

[tickmike]

This is on my FTTP connection with 'NoOne' isp it's suppose to be a business connection and no ports / IP blocked 

$ ping -c4 ns2.2hi.co.uk
PING ns2.2hi.co.uk (31.220.111.196) 56(84) bytes of data.

--- ns2.2hi.co.uk ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3018ms
...............................................................................................
$ ping -c4 ns1.2hi.co.uk
PING ns1.2hi.co.uk (31.220.111.196) 56(84) bytes of data.

--- ns1.2hi.co.uk ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3030ms

..............................................................................................

This is on my ADSL2 with Eclipse isp.

$ ping -c4 ns1.2hi.co.uk
PING ns1.2hi.co.uk (31.220.111.196) 56(84) bytes of data.
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=1 ttl=54 time=24.5 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=2 ttl=54 time=25.0 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=3 ttl=54 time=25.3 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=4 ttl=54 time=25.2 ms

--- ns1.2hi.co.uk ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 10185ms
rtt min/avg/max/mdev = 24.583/25.063/25.354/0.293 ms

.........................................................................................
$ ping -c4 ns2.2hi.co.uk
PING ns2.2hi.co.uk (31.220.111.196) 56(84) bytes of data.
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=1 ttl=54 time=24.9 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=2 ttl=54 time=25.6 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=3 ttl=54 time=26.1 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=4 ttl=54 time=25.4 ms

--- ns2.2hi.co.uk ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 10198ms
rtt min/avg/max/mdev = 24.968/25.545/26.116/0.426 ms

...

Another puzzling thing, on my iPad I have 'Network Analyzer' App

On FTTP
 it pings, Route never completes after 13 steps, Port all blocked, DNS ok

But

On ADSL2
it pings,
Route completes in 15 steps
Ports 11 open.
DNS ok.

So why does a ping on my laptop fail on FTTP,  but works on my iPad connected through FTTP ,
 Odd

[tickmike]

@jelv
My route from step 6 to 10 are the same as yours, also 13 is the same
11( similar IP to yours) + 12 my app says server in Cyprus ? (It has the flags where the servers are )

So my route on my FTTP connection stops at step 13

So is it John who is blocking me ? 

But yet again why does it work on my ADSL" connection.

This is odd very odd. 

[Chrysalis]

tickmike you missed the most important information if you suspecting an ISP problem, that is the routing.You said you ran the analyzer, can we please see the output, alternatively, do a ICMP traceroute, pathping or MTR.

[tickmike]

tickmike you missed the most important information if you suspecting an ISP problem, that is the routing.You said you ran the analyzer, can we please see the output, alternatively, do a ICMP traceroute, pathping or MTR.

I was not sure how to show the output from my iPad network analyzer app

This is from my laptop today with my IP removed x.x.x.x

First on my FTTP Fixed IP connection.

$ traceroute -I 2hi.co.uk
traceroute to 2hi.co.uk (31.220.111.196), 30 hops max, 60 byte packets
 1  pfSense-Firewall-31-07-2020.localdomain (192.168.0.1)  0.200 ms  0.175 ms *
 2  lo0.bng1.thn.lon.uk.as49375.net (x.x.x.x)  12.673 ms * *
 3  * * *
 4  * * *
 5  195.66.227.67 (195.66.227.67)  12.892 ms * *
 6  po50.er1.thn1.net.ans.uk (78.24.91.30)  18.166 ms * *
 7  po20.er1.man8.net.ans.uk (78.24.91.32)  18.211 ms * *
 8  po10.er2.man8.net.ans.uk (78.24.91.29)  18.132 ms * *
 9  po30.er2.man6.net.ans.uk (78.24.91.1)  17.988 ms * *
10  46.37.183.131.srvlist.ukfast.net (46.37.183.131)  17.964 ms * *
11  153.92.2.242 (153.92.2.242)  18.292 ms * *
12  172.17.1.5 (172.17.1.5)  18.595 ms * *
13  77.37.35.100 (77.37.35.100)  18.356 ms * *
14  * * *
then *** till step 30

...................................................................................................

On ADSL2 connection
$ traceroute -I 2hi.co.uk
traceroute to 2hi.co.uk (31.220.111.196), 30 hops max, 60 byte packets
 1  192.168.1.254 (192.168.1.254)  77.546 ms  77.104 ms  76.626 ms
 2  10.75.66.0 (10.75.66.0)  21.471 ms * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  ae7.er1.lhr23.uk.zip.zayo.com (64.125.24.191)  21.364 ms  21.030 ms *
 8  * 79.141.43.210.IPYX-180002-004-ZYO.zip.zayo.com (79.141.43.210)  22.159 ms *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  77.37.35.100 (77.37.35.100)  28.553 ms  28.338 ms *
15  * * *
16  * * *
17  * * *
18  * * *
19  mail.2hi.co.uk (31.220.111.196)  26.303 ms  24.949 ms  25.047 ms

------------------------------------------------------------------------------------
Ports on FTTP


$ nmap -Pn 2hi.co.uk
Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-13 16:42 GMT
Nmap scan report for 2hi.co.uk (31.220.111.196)
Host is up.
Other addresses for 2hi.co.uk (not scanned): 2a02:4780:f:518a::1
rDNS record for 31.220.111.196: mail.2hi.co.uk
All 1000 scanned ports on 2hi.co.uk (31.220.111.196) are filtered

Nmap done: 1 IP address (1 host up) scanned in 201.97 seconds

..............................................................................................

ports on ADSL2

$ nmap -Pn 2hi.co.uk
Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-13 15:26 GMT
Nmap scan report for 2hi.co.uk (31.220.111.196)
Host is up (0.026s latency).
Other addresses for 2hi.co.uk (not scanned): 2a02:4780:f:518a::1
rDNS record for 31.220.111.196: mail.2hi.co.uk
Not shown: 928 filtered ports, 58 closed ports
PORT     STATE SERVICE
21/tcp   open  ftp
22/tcp   open  ssh
24/tcp   open  priv-mail
25/tcp   open  smtp
53/tcp   open  domain
80/tcp   open  http
110/tcp  open  pop3
143/tcp  open  imap
443/tcp  open  https
465/tcp  open  smtps
587/tcp  open  submission
993/tcp  open  imaps
995/tcp  open  pop3s
3306/tcp open  mysql

Nmap done: 1 IP address (1 host up) scanned in 252.15 seconds

[g3uiss]

I think your pfsense firewall is not configured correctly. There is NO WAY John can block you.

[Chrysalis]

For what its worth '2hi.co.uk' times out for me on a web browser now.

However I Can access port 25 (email).

What does 'telnet mail.2hi.co.uk 25' yield?  Do you see a 220 response?

[tickmike]

For what its worth '2hi.co.uk' times out for me on a web browser now.
However I Can access port 25 (email).

What does 'telnet mail.2hi.co.uk 25' yield?  Do you see a 220 response?

Not good about timeout.

On FTTP

$ telnet mail.2hi.co.uk 25
Trying 31.220.111.196...
telnet: connect to address 31.220.111.196: Connection timed out
telnet: Unable to connect to remote host: Connection timed out

On ADSL2

$ telnet mail.2hi.co.uk 25
Trying 31.220.111.196...
Connected to mail.2hi.co.uk (31.220.111.196).
Escape character is '^]'.
220 2hi.co.uk InterWorx-CP SMTP Server ESMTP

[tickmike]

I think your pfsense firewall is not configured correctly. There is NO WAY John can block you.

To re check my pfSense box,
It has Two WAN interfaces.

FTTP
ADSL2 

it's set up to 'fallover' to work on ADSL2 if FTTP fails and visa versa .

Sopping ADSL2 interface.

using FTTP only

$ ping -c4 2hi.co.uk
PING 2hi.co.uk (31.220.111.196) 56(84) bytes of data.

--- 2hi.co.uk ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3025ms
--------------------------------------------------------------------

$ traceroute -I 2hi.co.uk
traceroute to 2hi.co.uk (31.220.111.196), 30 hops max, 60 byte packets
 1  pfSense-Firewall-31-07-2020.localdomain (192.168.0.1)  0.209 ms  0.180 ms *
 2   (x.x.x.x)  9.126 ms * *
 3  * * *
 4  195.66.227.67 (195.66.227.67)  9.189 ms * *
 5  po50.er1.thn1.net.ans.uk (78.24.91.30)  14.527 ms * *
 6  po20.er1.man8.net.ans.uk (78.24.91.32)  14.640 ms * *
 7  po10.er2.man8.net.ans.uk (78.24.91.29)  14.500 ms * *
 8  po30.er2.man6.net.ans.uk (78.24.91.1)  14.397 ms * *
 9  46.37.183.131.srvlist.ukfast.net (46.37.183.131)  14.425 ms * *
10  153.92.2.242 (153.92.2.242)  15.019 ms * *
11  172.17.1.5 (172.17.1.5)  15.521 ms * *
12  77.37.35.100 (77.37.35.100)  15.087 ms * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
----------------------------------------------
Stopping FTTP interface.

Starting ADSL2

using ADSL2
$ ping -c4 2hi.co.uk
PING 2hi.co.uk (31.220.111.196) 56(84) bytes of data.
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=1 ttl=54 time=23.4 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=2 ttl=54 time=24.0 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=3 ttl=54 time=23.1 ms
64 bytes from mail.2hi.co.uk (31.220.111.196): icmp_req=4 ttl=54 time=24.3 ms

--- 2hi.co.uk ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 23.168/23.739/24.318/0.465 ms

-------------------------------------------------------------------
$ traceroute -I 2hi.co.uk
traceroute to 2hi.co.uk (31.220.111.196), 30 hops max, 60 byte packets
 1  pfSense-Firewall-31-07-2020.localdomain (192.168.0.1)  0.195 ms  0.173 ms *
 2  10.75.66.0 (10.75.66.0)  16.385 ms * *
 3  77.107.77.43 (77.107.77.43)  19.637 ms * *
 4  77.107.77.42 (77.107.77.42)  23.321 ms * *
 5  lonap-gw-no-dns-yet.zayo.com (5.57.80.201)  26.739 ms * *
 6  * ae19.cr1.lhr11.uk.zip.zayo.com (64.125.24.68)  18.981 ms *
 7  ae7.er1.lhr23.uk.zip.zayo.com (64.125.24.191)  20.477 ms * *
 8  79.141.43.210.ipyx-180002-004-zyo.zip.zayo.com (79.141.43.210)  20.307 ms * *
 9  po10.er1.lon2.net.ans.uk (78.24.91.250)  25.087 ms * *
10  po40.er1.man6.net.ans.uk (78.24.91.45)  25.127 ms * *
11  46.37.183.129.srvlist.ukfast.net (46.37.183.129)  26.377 ms * *
12  153.92.2.209 (153.92.2.209)  25.343 ms * *
13  * * *
14  77.37.35.100 (77.37.35.100)  25.077 ms * *
15  mail.2hi.co.uk (31.220.111.196)  25.091 ms * *

-------------------------------------------------------------------------------

Then restoring FTTP interface back again.

Well to me it's not my firewall 

So why does it work on ADSL" and Not FTTP

[g3uiss]

So your FTTP ISP is blocking some IP's

QED

[Chrysalis]

Not good about timeout.

On FTTP

$ telnet mail.2hi.co.uk 25
Trying 31.220.111.196...
telnet: connect to address 31.220.111.196: Connection timed out
telnet: Unable to connect to remote host: Connection timed out

On ADSL2

$ telnet mail.2hi.co.uk 25
Trying 31.220.111.196...
Connected to mail.2hi.co.uk (31.220.111.196).
Escape character is '^]'.
220 2hi.co.uk InterWorx-CP SMTP Server ESMTP

Try 'telnet mail.2hi.co.uk 587'.

Some ISPs do block port 25 to prevent people sending spam from their broadband connection.