Le 2017-09-08 21:15:26, wa...@debian.org a écrit :
> Package: mirrors
> User: mirr...@packages.debian.org
> Usertags: mirror-problem
>
> Hi

Hello Bastian,

> Since a few days our mirror pushs to debian.nautile.nc fail. SSH
> connections time out:
>
> |Sep 08 09:26:53 klecker runmirrors[9352]: Sending normal push
> |ssh: connect to host debian.nautile.nc port 2222: Connection timed out
>
> As you are syncing directly from a syncproxy and are candidate for
> ftp.nc.debian.org, we expect working pushs. Please make sure such pushs
> work.

We have migrated our debian mirror to a new server, with the following 
configuration:

HTTP (TCP/80) :
 - http://ftp.nc.debian.org/debian/
 - http://debian.nautile.nc/debian/

HTTPS (TCP/443) :
 - https://ftp.nc.debian.org/debian/
 - https://debian.nautile.nc/debian/

Those urls are now served by a load-balanced reverse proxy with IPv4 and IPv6.

RSYNC is now avalaible on rsync.debian.nautile.nc::debian but over IPv6 only

SSH for push triggering is available on:

ssh m...@ssh.debian.nautile.nc -p 22
ECDSA key fingerprint is SHA256:yZb3xIUS3PZKpmk/dbmkxyYCb9VxJHe5ClGCM2DLZ0A.
over IPv6 only

Firewall rules are set with ferm :

domain ip6 table filter chain INPUT { proto tcp dport (ssh) saddr 
@ipfilter(2001:610:1908:b000::148:10) ACCEPT; }

Your key is set up as following:

no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="~/bin/ftpsync
 sync:archive:debian",from="klecker.debian.org,2001:610:1908:b000::148:10" 
ssh-rsa 
AAAAB3NzaC1yc2EAAAABIwAAAQEA0aVa10R4g+GZJssBkjJPDVziK2Qd6nFhh6s2rxpEXvuWHlVxttKNK4rTRqqJrr4kvS12L51DGr/x5II2te7/zVzL2Bid9cNWVmQ1yB6klVnY+w6qiW6L61l5j+m6XiueRnbWItkTJJ5XFXtUXth6aYvvBkTXq8WzB5doGmGaWxmBU5By8U8opTcLrDFBx4z4OhMUtlV5KnxOIMYVEct+637Wj0fiwyIr9r1KnGgzPN2dNR06VwSBU1vCbQy0OdLhoG9ADql68datEI6vTr7HrcxsgGVbdSUZjXrZt0lWD0+FXc8icp49uT6K/APHn+5x3zL9uQlCzBIy9QxK0cYicw==
 ftp.debian.org-archvsync@kassia (2008-05-26)

Could you update your configuration to reflect those changes and tell me if all 
is now working as expected?

Thanks.

Best regards,

> Regards,
> Bastian Blank

-- 
Nautile - Nicolas Aupetit
Tél : (+ 687) 28.74.28
Web : https://www.nautile.nc/

Reply via email to