Few rules from an "expert". 1. Try to ping some web site. google, ynet (to compare). 2. with mtr you can detect the ip from where you get packet loss. 3. traceroute google.com (if you see *** at some part of the trace, you hit a firewall). 4. tcptraceroute google.com (bypass firewall. Sometimes you get there ********, 2nd proof of firewall). 5. hping2 to bypass firewall. 5. use firewalk . Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. I recommend to read the man of firewalk. 6. If you have the ip (from mtr) go to http://www.dnsstuff.com and put the ip there. You will find if this belongs to hot or bezeq. Some interesting things you will find there. 7. nmap to check how harsh the firewall is. Contact me in private to give you the flags. 8. One more friendly advice, don't tell them you have linux. You will get immediately the reply "we don't support linux".
On Sun, Apr 20, 2008 at 5:11 PM, Ohad Levy <[EMAIL PROTECTED]> wrote: > I'm not sure what do you mean by Bezeq, but I currently ping the pptp ip > address (before connecting to the internet), which is in the 172.x.x.x > subnet. > would this be the actually server located in the ISP? I see about 3ms > difference between the internet first hop and the pptp server.... > > Thanks, > Ohad > > > > On Sun, Apr 20, 2008 at 4:00 PM, Geoff Shang <[EMAIL PROTECTED]> wrote: > > > > Ohad Levy wrote: > > > > > > > I know what a tunnel is, the main problem is to identify if the problem > is > > > hot related or isp related. > > > obviously, if hot is the problem, the first hop over the internet is > already > > > effected. > > > > > > the main question is if pinging to hot ip range (in this case its the > server > > > which starts the pptp tunnel) actually prove that its not isp related > rather > > > than an infrastruture problem in hot. > > > > > > > No. If you ping a Hot IP, you're going to go through that affected tunnel > connection to Bezeq first, then via them to the Hot machine. The only way > you could ping Hot infrastructure directly is if you can do it via the > ethernet connection directly rather than via the tunnel. This will of > course be entirely dependent on their routing and what they'll let through > if anything. > > > > Geoff. > > > > ================================================================= > > To unsubscribe, send mail to [EMAIL PROTECTED] with > > the word "unsubscribe" in the message body, e.g., run the command > > echo unsubscribe | mail [EMAIL PROTECTED] > > > > > > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
