Re: More info

["Fergie" <fergdawg () netzero net>]

On possibility, although very slight, is that there could be a
repeater somewhere in the telco infrastucture that is nominally
bad -- or ready to go tits up. In my years working in the telco
world and data networking, I have seen this happen on a number of
ocassions.

YMMV,

- ferg


-- Drsolly <drsollyp () drsolly com> wrote:
I've determined two more byte sequences that trigger the block, in 
addition to bc bc bc bc bc bc

There's also

1c 1c 1c 1c 1c 1c

and

e4 64 1c 1c 1c 1c

Which means there's probably other sequences that I hven't narrowed down 
on yet.

Please keep supplying the Works/not works info and the traceroutes. I've
got a hypothesis now that the culprit is the London Internet Exchange
(linx), because that's the common factor in the bad ones, and it's in none
of the good ones. They run 100 gbit/sec. It's unthinkable that they would
be doing any sort of packet inspection, though, so I'm still very much of
an open mind.



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.