X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:subject:references:to:reply-to:from:message-id :date:mime-version:in-reply-to:content-type :content-transfer-encoding; q=dns; s=default; b=vRO35Yr4cj99YXRK 6I9L5GPpgDGUzXOjLxq5y6+5+2JiUU9Yiq1RjIhExcEBIwc3erE0aOX/2dNuhxJn 53Qx0vY3Rx49bf4pdds2T8jHMpFTsJ2mV9r9SJeHi4u/btW5IIwK7ufFkkLWmfX3 gp6LZiC9z8VQGifUGPoVdUKTHvI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:subject:references:to:reply-to:from:message-id :date:mime-version:in-reply-to:content-type :content-transfer-encoding; s=default; bh=yP9fgRNdA/9JQa1smLBl2t n0nws=; b=dEvdexWIF9+48np/JGenR2ffaC9bwC8n+rMGFcwW7R/YcIR94BA/TT 3CSHDEzxnTDIiLFQui8OdTqv7Go83T3Z2rsrMsuhhcP4O8p5wK0uncvyrh0lNYmD gXUB/2Y6EyumSJVdGH+XlkB/U+AIuH16Y/DXhb8TEW4YfjOsrLX9g= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=Contact, house, browser, unsuccessful X-HELO: smtp-out-so.shaw.ca X-Authority-Analysis: v=2.2 cv=B8rJ6KlM c=1 sm=1 tr=0 a=WqCeCkldcEjBO3QZneQsCg==:117 a=WqCeCkldcEjBO3QZneQsCg==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=CCpqsmhAAAAA:8 a=r4c-xNZKfot60CFD0jMA:9 a=hF1CksVsk0LEdpYT:21 a=E8i7NRMegIKrCbAR:21 a=QEXdDO2ut3YA:10 a=sRI3_1zDfAgwuvI8zelB:22 a=ul9cdbp4aOFLsgKbc677:22 Subject: Re: What is the proper mailing list for server issues? References: <8f4e32c2-799d-61c5-ccc3-f786bb79bf71 AT starwolf DOT com> <59902487-dd66-9004-e71f-dc2930b4f72a AT gmail DOT com> <91DCAC3CB99C724EB365BB64677FBE7B16F226 AT MX204CL04 DOT corp DOT emc DOT com> To: cygwin AT cygwin DOT com Reply-To: Brian DOT Inglis AT SystematicSw DOT ab DOT ca From: Brian Inglis Message-ID: <6f556bbf-6098-0cd1-e7b3-284380c703b5@SystematicSw.ab.ca> Date: Sat, 22 Apr 2017 22:06:36 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfLSxNyBRYUkRS3KL6EKuIB83H8Rrf1S40pMLJiXbR/bN0Gtqq9nE+R++R0eogkKEVtIzg8BKzY9RsHFDpO1XIkbkBKkUHanqvP5tpkRwFXue4sfHPBMV lZi/mx0Ec1YQ5ZWflBm7qtOcyUO3WLIvQJntCUowi+YzcwcK8wdeSwYhimd/tx7D9l8o29XuiFTi9w== X-IsSubscribed: yes On 2017-04-22 21:04, Greywolf wrote: > I'm trying from several different machines in the house, some > directly connected, as well as any thru the NAT interface. This is > the ONLY site I cannot reach normally. I have to use the Tor browser > to reach the site, and, even then, once I get a new cygwin setup > .exe, the list of mirrors doesn't auto-fill because (surprise, > surprise) I cannot connect via any known protocol to either > www.cygwin.com or 209.132.180.131. > The SSL certificates I get from a successful Tor hit and an > unsuccessful 403 from home are identical > I am concluding that at least the address range 69.12.250.{40-47} are > being blocked; and it probably extends beyond that. > Firewall is a Watchguard Firebox running pf_sense. I get the 403 even > with a direct (non-firewalled, non-routed connection) > I have attached two .txt file with runs from two servers within my > house, one running NetBSD, one running Windows [thus the importance > of cygwin]. > Included are runs from 'host'/'nslookup', 'ping', 'traceroute', > 'curl' and 'openssl' > This is NOT a local firewall issue, otherwise my other machines on > different addresses would not have a problem. > smaug is my internal firewall. > stupidhead is the default next hop from said firewall. > "...it's nothing to do with cygwin.com." > Sooooo, why else would I get a refusal from the web server from this > address when I can connect from elsewhere ** and the SSL certificate > is the same ** ?? > What am I missing? > "...but there's nothing we can do from here." > Where is "here"? If "here" == "cygwin.com", you can't tell me if my > IP is on an internal blacklist (and, moreso, why?)?? Sourceware runs the servers. Contact sourceware.org support sourcemaster at sourceware dot org to see what their server logs say, or what their BLs are blocking. -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple