Re: iptables questions

2011-04-18 Thread Gabriel Ramirez
On 04/18/2011 07:13 PM, JD wrote: > Could very well be a harmless bug. > I was also wondering if the bug is caused by the client request > being broadcast to all 3 gmail servers, and one of them quickly > responds, and one or both of the other 2, which are apparently > not notified that the respon

Re: iptables questions

2011-04-18 Thread JD
On 04/18/2011 05:05 PM, Gabriel Ramirez wrote: > On 04/17/2011 03:53 PM, JD wrote: > >> Well, it is a bit strange that Google would set up their servers >> so that my machine tries to download latest messages by sending >> it's request to pop.gmail.com (74.125.127.109) to port 995, >> and receive r

Re: iptables questions

2011-04-18 Thread Gabriel Ramirez
On 04/17/2011 03:53 PM, JD wrote: > Well, it is a bit strange that Google would set up their servers > so that my machine tries to download latest messages by sending > it's request to pop.gmail.com (74.125.127.109) to port 995, > and receive reply from a different IP address. > How can I configur

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 02:26 PM, Paul Morgan wrote: > > > On Apr 17, 2011 4:53 PM, "JD" > wrote: > > > > Well, it is a bit strange that Google would set up their servers > > so that my machine tries to download latest messages by sending > > it's request to pop.gmail.com

Re: iptables questions

2011-04-17 Thread Paul Morgan
On Apr 17, 2011 4:53 PM, "JD" wrote: > > Well, it is a bit strange that Google would set up their servers > so that my machine tries to download latest messages by sending > it's request to pop.gmail.com (74.125.127.109) to port 995, > and receive reply from a different IP address. > How can I con

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 01:25 PM, James McKenzie wrote: > On 4/17/11 1:10 PM, JD wrote: >> On 04/17/2011 12:34 PM, James McKenzie wrote: >>> On 4/17/11 12:02 PM, JD wrote: I have instrumented my iptables to log all DROP'ed packets. I have a huge plethora of packets dropped from these 3 IP addr

Re: iptables questions

2011-04-17 Thread Joe Zeff
On 04/17/2011 01:12 PM, JD wrote: > Actually, as I just replied to James McKenzie, > the domain REGISTRAR is markmonitor.com > and the REGISTRANT is Google.com. I sit corrected. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedor

Re: iptables questions

2011-04-17 Thread James McKenzie
On 4/17/11 1:10 PM, JD wrote: > On 04/17/2011 12:34 PM, James McKenzie wrote: >> On 4/17/11 12:02 PM, JD wrote: >>> I have instrumented my iptables to log all DROP'ed packets. >>> I have a huge plethora of packets dropped from these >>> 3 IP addresses: >>> 74.125.127.109 >>> 72.14.213.109 >>> 74.12

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 12:56 PM, Sam Sharpe wrote: > On 17 April 2011 20:33, Joe Zeff wrote: >> On 04/17/2011 12:02 PM, JD wrote: >>> All 3 addresses belong to google. >>> Just do whois 1e100.net >> Domain Name: 1e100.net >> >> Registrar Name: Markmonitor.com >> Registrar Whois: whois.

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 12:33 PM, Joe Zeff wrote: > On 04/17/2011 12:02 PM, JD wrote: >> nslookup reports >> 109.127.125.74.in-addr.arpaname = pz-in-f109.1e100.net >> 109.213.14.72.in-addr.arpa name = pv-in-f109.1e100.net. >> 109.53.125.74.in-addr.arpa name = pw-in-f109.1e100.net >> >> I am hav

Re: iptables questions

2011-04-17 Thread Joe Zeff
On 04/17/2011 12:56 PM, JD wrote: > So, who do I report this to? Google? or the DHS? :) Google is both the Administrative and Technical contact; I'd try them first if it were me. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedo

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 12:34 PM, James McKenzie wrote: > On 4/17/11 12:02 PM, JD wrote: >> I have instrumented my iptables to log all DROP'ed packets. >> I have a huge plethora of packets dropped from these >> 3 IP addresses: >> 74.125.127.109 >> 72.14.213.109 >> 74.125.53.109 > Google Mail on the Secure IM

Re: iptables questions

2011-04-17 Thread Sam Sharpe
On 17 April 2011 20:33, Joe Zeff wrote: > On 04/17/2011 12:02 PM, JD wrote: >> All 3 addresses belong to google. >> Just do  whois 1e100.net > >  Domain Name: 1e100.net > >         Registrar Name: Markmonitor.com >         Registrar Whois: whois.markmonitor.com >         Registrar Homepage: http:

Re: iptables questions

2011-04-17 Thread JD
On 04/17/2011 12:33 PM, Joe Zeff wrote: > On 04/17/2011 12:02 PM, JD wrote: >> nslookup reports >> 109.127.125.74.in-addr.arpaname = pz-in-f109.1e100.net >> 109.213.14.72.in-addr.arpa name = pv-in-f109.1e100.net. >> 109.53.125.74.in-addr.arpa name = pw-in-f109.1e100.net >> >> I am hav

Re: iptables questions

2011-04-17 Thread James McKenzie
On 4/17/11 12:02 PM, JD wrote: > I have instrumented my iptables to log all DROP'ed packets. > I have a huge plethora of packets dropped from these > 3 IP addresses: > 74.125.127.109 > 72.14.213.109 > 74.125.53.109 Google Mail on the Secure IMAP port? Interesting. Maybe they are misrouted packet

Re: iptables questions

2011-04-17 Thread Joe Zeff
On 04/17/2011 12:02 PM, JD wrote: > nslookup reports > 109.127.125.74.in-addr.arpaname = pz-in-f109.1e100.net > 109.213.14.72.in-addr.arpa name = pv-in-f109.1e100.net. > 109.53.125.74.in-addr.arpa name = pw-in-f109.1e100.net > > I am having no problems retrieving my email at all. > TB

iptables questions

2011-04-17 Thread JD
I have instrumented my iptables to log all DROP'ed packets. I have a huge plethora of packets dropped from these 3 IP addresses: 74.125.127.109 72.14.213.109 74.125.53.109 and all of them are from source port 995, which is the secure POP3 port used by Thunderbird. All 3 IP addresses belong to goog