Ti, Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing: [jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either. Thanks, Joe
Durrr... I should probably also include that the problem is preventing a few of the webpages hosted by pokey from working as it can't find db.ci: http://beagle.ci.uchicago.edu/ On Oct 1, 2013, at 8:37 AM, Joe Urbanski <[email protected]> wrote:
Ti,
Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing:
[jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either.
Thanks,
Joe
On Oct 1, 2013, at 08:42:53, Joe Urbanski wrote:
Durrr... I should probably also include that the problem is preventing a few of the webpages hosted by pokey from working as it can't find db.ci:
Joe, please call me in the office. David
Ti is out today. I will have someone else take a look. T On Oct 1, 2013, at 8:37 AM, Joe Urbanski wrote:
Ti,
Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing:
[jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either.
Thanks,
Joe
_______________________________________________ core-helpdesk mailing list [email protected] https://lists.mcs.anl.gov/mailman/listinfo/core-helpdesk
Ah, okay, didn't know Ti was out. Thanks Tina! On Oct 1, 2013, at 8:54 AM, Tina Stanton-Piersanti <[email protected]> wrote:
Ti is out today. I will have someone else take a look.
T
On Oct 1, 2013, at 8:37 AM, Joe Urbanski wrote:
Ti,
Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing:
[jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either.
Thanks,
Joe
_______________________________________________ core-helpdesk mailing list [email protected] https://lists.mcs.anl.gov/mailman/listinfo/core-helpdesk
I can ssh to bowser, and from there virsh console to pokey. But I can't get in on pokey as me, and I don't know the CI root. IF someone else wants to do that. What's this about UofC blocking DNS? -- Craig On Oct 1, 2013, at 8:37 AM, Joe Urbanski <[email protected]> wrote:
Ti,
Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing:
[jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either.
Thanks,
Joe
_______________________________________________ core-helpdesk mailing list [email protected] https://lists.mcs.anl.gov/mailman/listinfo/core-helpdesk
On Oct 1, 2013, at 9:02 AM, Craig Stacey <[email protected]> wrote:
I can ssh to bowser, and from there virsh console to pokey. But I can't get in on pokey as me, and I don't know the CI root. IF someone else wants to do that.
I just got off the phone with David, and he reports he's tried every root password he knows of with no success.
What's this about UofC blocking DNS?
I don't think it's a firewall or network issue as the request aren't timing out, they're coming back as refused: jurbanski@login5:/lustre/beagle/jurbanski> dig @128.135.247.50 james.ci.uchicago.edu ; <<>> DiG 9.6-ESV-R7-P4 <<>> @128.135.247.50 james.ci.uchicago.edu ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 48186 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;james.ci.uchicago.edu. IN A ;; Query time: 3 msec ;; SERVER: 128.135.247.50#53(128.135.247.50) ;; WHEN: Tue Oct 1 09:09:31 2013 ;; MSG SIZE rcvd: 39 David's been talking with ITS about this, so I'll let him fill in the latest here.
-- Craig
On Oct 1, 2013, at 8:37 AM, Joe Urbanski <[email protected]> wrote:
Ti,
Last night I discovered that UC is now apparently blocking DNS requests to its nameservers from ANL subnets. I was able to work around the problem on Beagle by dropping Google's public DNS servers into resolv.conf (8.8.8.8), but I can't login to pokey to do the same thing:
[jurbanski@pamby ~]$ ssh pokey.ci.uchicago.edu ssh_exchange_identification: Connection closed by remote host
From that error I'm assuming somebody will need to go in via the console. Can you log into that box via the console (I'm assuming it's a VM, but I don't know what it's host server is)???
In a related note, the ANL DNS servers also seem to be refusing requests as well. Or at least from Beagle. I can't query any of the DNS servers listed in pamby's resolv.conf from Beagle either.
Thanks,
Joe
_______________________________________________ core-helpdesk mailing list [email protected] https://lists.mcs.anl.gov/mailman/listinfo/core-helpdesk
On Oct 1, 2013, at 09:02:33, Craig Stacey wrote:
I can ssh to bowser, and from there virsh console to pokey. But I can't get in on pokey as me, and I don't know the CI root. IF someone else wants to do that.
I can also get to bowser but I apparently do not have a root password and my personal account would require DNS to be functional. I could reboot the VM into single user mode to fix it. Should I go ahead and do it since, It's already broken.
What's this about UofC blocking DNS?
Don't know. I have a ticket open with them. David Forero System Administrator Computation Institute University of Chicago
participants (4)
-
Craig Stacey -
David Forero -
Joe Urbanski -
Tina Stanton-Piersanti