codema.in
Thu 8 Sep 2016 8:08AM

problem connecting to many http services from diasp.in server

PP Pirate Praveen Public Seen by 298

$ wget packages.prosody.im
--2016-09-08 13:34:27-- http://packages.prosody.im/
Resolving packages.prosody.im (packages.prosody.im)... 89.16.173.64, 2001:41c8:1:5a3e::40
Connecting to packages.prosody.im (packages.prosody.im)|89.16.173.64|:80... failed: Connection timed out.
Connecting to packages.prosody.im (packages.prosody.im)|2001:41c8:1:5a3e::40|:80... failed: Network is unreachable.

This is causing apt-get update (it can connect to archive.hamaralinux.org) and federation is broken (it cannot search for new users and also posts from diasp.in is not reaching other pods like poddery.com)

@vik @amardeepsingh @rajudv can some check if there are some restrictive firewall rules that blocks these requests?

I disabled ipv6 but that did not fix the issue

PP

Pirate Praveen Thu 8 Sep 2016 9:08AM

This seems to be similar to https://github.com/diaspora/diaspora/issues/5600

AS

Amardeep Singh Thu 8 Sep 2016 2:12PM

@praveenarimbrathod - I have allowed this server for outgoing access now. We have been making quite a lot of changes in our firewall polices. In case you get stuck on any other port let me know.

Currently all outgoing is allowed from server and following ports are allowed for incoming

target-port="80 443 22 60000-61000 5222 5269 5281" comment="Diaspora Pod"

RD

Raju Devidas Thu 8 Sep 2016 3:24PM

Thanks @amardeepsingh . @praveenarimbrathod could you verify if the issues have been resolved?

PP

Pirate Praveen Thu 8 Sep 2016 5:25PM

@amardeepsingh @rajudv thanks for the fix.