git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

[John David Anglin]

Hi,

A couple of days ago, git stopped working to clone or pull gcc to 132.246.10.86.  I see the following error:

-bash-4.4$ git pull --verbose
Looking up gcc.gnu.org ... done.
Connecting to gcc.gnu.org (port 9418) ... 8.43.85.97 done.
fatal: read error: Connection reset by peer

Git is still working from other sites.

I suspect the issue might be because there is no dns lookup for hiauly3.hia.nrc.ca.  But the following works:

dave@mx3210:~$ nslookup 132.246.10.86
86.10.246.132.in-addr.arpa      name = hiauly3.hia.nrc.ca.

Could you check why the connect is being reset?

Thanks,
Dave Anglin

-- 
John David Anglin  dave.anglin@bell.net

Re: git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

[Frank Ch. Eigler]

Hi -

> A couple of days ago, git stopped working to clone or pull gcc to 132.246.10.86.  I see the following error:
> 
> -bash-4.4$ git pull --verbose
> Looking up gcc.gnu.org ... done.
> Connecting to gcc.gnu.org (port 9418) ... 8.43.85.97 done.
> fatal: read error: Connection reset by peer

I don't see any recent attempts from that host in any of the logs.  
I have a tcpdump running for a little while, could you try right now?
Is it possible that your ISP is interfering with this traffic?
(You can use https:// git urls too.)

- FChE

Re: git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

[John David Anglin]

On 2021-03-24 3:53 p.m., Frank Ch. Eigler wrote:
> Hi -
>
>> A couple of days ago, git stopped working to clone or pull gcc to 132.246.10.86.  I see the following error:
>>
>> -bash-4.4$ git pull --verbose
>> Looking up gcc.gnu.org ... done.
>> Connecting to gcc.gnu.org (port 9418) ... 8.43.85.97 done.
>> fatal: read error: Connection reset by peer
> I don't see any recent attempts from that host in any of the logs.  
> I have a tcpdump running for a little while, could you try right now?
> Is it possible that your ISP is interfering with this traffic?
> (You can use https:// git urls too.)
I just tried a couple of pulls.

It is possible that ISP is interfering.  That's why I tested other sites.

Regards,
Dave

-- 
John David Anglin  dave.anglin@bell.net

Re: git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

[Frank Ch. Eigler]

Hi -

> > (You can use https:// git urls too.)

> I just tried a couple of pulls.
> It is possible that ISP is interfering.  That's why I tested other sites.

OK, tcpdump indicates only TCP-SYN packets being received and
replied-to by the server.  No further packets are received from your
side to complete the TCP handshake or to exchange data.

20:01:41.705248 IP hiauly3.hia.nrc.ca.49527 > ip-8-43-85-97.sourceware.org.git: Flags [S], seq 3880651354, win 22080, options [mss 1380,nop,wscale 6,sackOK,eol], length 0
20:01:41.705295 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
20:01:42.709082 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
20:01:44.705048 IP hiauly3.hia.nrc.ca.49527 > ip-8-43-85-97.sourceware.org.git: Flags [S], seq 3880651354, win 22080, options [mss 1380,nop,wscale 6,sackOK,eol], length 0
20:01:44.705092 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
20:01:46.741079 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
[...]

I would assume there is some dynamic firewall problem at your end
that prevents the reply packets from being received.  Please try
traffic through https (port 443) instead, which is less likely to
be interfered with.

   % git clone https://gcc.gnu.org/git/gcc.git

- FChE

Re: git access from 132.246.10.86 (hiauly3.hia.nrc.ca)

[John David Anglin]

On 2021-03-24 5:47 p.m., Frank Ch. Eigler wrote:
> Hi -
>
>>> (You can use https:// git urls too.)
>> I just tried a couple of pulls.
>> It is possible that ISP is interfering.  That's why I tested other sites.
> OK, tcpdump indicates only TCP-SYN packets being received and
> replied-to by the server.  No further packets are received from your
> side to complete the TCP handshake or to exchange data.
>
> 20:01:41.705248 IP hiauly3.hia.nrc.ca.49527 > ip-8-43-85-97.sourceware.org.git: Flags [S], seq 3880651354, win 22080, options [mss 1380,nop,wscale 6,sackOK,eol], length 0
> 20:01:41.705295 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
> 20:01:42.709082 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
> 20:01:44.705048 IP hiauly3.hia.nrc.ca.49527 > ip-8-43-85-97.sourceware.org.git: Flags [S], seq 3880651354, win 22080, options [mss 1380,nop,wscale 6,sackOK,eol], length 0
> 20:01:44.705092 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
> 20:01:46.741079 IP ip-8-43-85-97.sourceware.org.git > hiauly3.hia.nrc.ca.49527: Flags [S.], seq 2021537575, ack 3880651355, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
> [...]
>
> I would assume there is some dynamic firewall problem at your end
> that prevents the reply packets from being received.  Please try
> traffic through https (port 443) instead, which is less likely to
> be interfered with.
Puzzling.
>    % git clone https://gcc.gnu.org/git/gcc.git
That doesn't work either:

-bash-4.4$ git clone -v https://gcc.gnu.org/git/gcc.git gcc-11-new
Cloning into 'gcc-11-new'...

fatal: unable to access 'https://gcc.gnu.org/git/gcc.git/': OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to gcc.gnu.org:443

This seems to work:
git clone https://github.com/gcc-mirror/gcc gcc-11-new

and the following also works:
git clone git://github.com/gcc-mirror/gcc gcc-11-new

Thanks,
Dave

-- 
John David Anglin  dave.anglin@bell.net