Looks like we could be onto something!

If possible, can one (or both) of you run a short Wireshark capture when trying to access the website and attach it to a support ticket explaining the problem? That way I should be able to get one of our Net Ops guys to take a closer look.

done - ticket 30149535

Thanks Jim

seems to be moving even if I don't understand the ticket reply

SYN is not ACK'd and could very well be a block. I've mailed the tech contact/hosts to see if anything in 81.174.128.0/17 has been fw'd for any reason.

Edited by deleted (Tue 29-Sep-09 13:02:03)

They're contacted the technical contact of the hosting supplier to see if our IP range is being firewalled off.

Ah! I thought fw'd was forwarded

I got a mail today from imaging resource. Problem solved!

Good to hear that it's working. The hop after washingtondc-datacenter.com belongs to the datacenter we lease our servers from. Their administrators had blocked access from a range of IPs due to some malicious looking activity late last week, but they had blocked too wide a range.

Again, thanks for letting us know and sorry for the inconvenience.

Regards,


--
Zig Weidelich

Technical Editor

Thanks for the update

Thanks especially oldjim for doing the wireshark 'stuff' for the PlusNet guys to get their teeth into.

The site now opens AOK

My router has been blocking IMO large port scans from this IP 4.79.142.206 this backtracks to Level 3 Comms in California.

Is this anything to do with the other "host" investigating the IP ranges PlusNet use and were blocked by them???

'They' are scanning ports 1002 and 1026 through to 1030 inclusively! For the record grc.com shows my system as being stealthed. Ooops also 1024 and 1025 ports.