Blocked IP ranges

[jamie_w]

Hi,

We're a UK ISP who were recently assigned new IP ranges by RIPE and have noticed that customers on our new IP ranges are unable to use their Sure signal devices. This is presumably because our new IP's are being firewalled by yourselves. We have verified this by routing the same devices over our previous ranges, which enables them to connect fine.

If possible can you forward this range onto the relevent department or provide me with the details for somebody at Vodafone we can contact regarding this. 

The affected range is 31.205.0.0/16

Thanks,

Jamie

[thecrown]

@Wayne

@gommog

In my search for more information on troubleshooting the Sure Signal box I have come across a document from D R Communications Ltd. (a Vodafone Gold Partner) which deals with setting up and investigating problems with the SS. Most of the document details things already mentioned here, but in addition they suggest that Packet Loss may be an issue. I have run a Tracert which would indicate that I am getting through to the Vodafone server, but the Path Ping test they recommend seems to indicate that between us and vodafone one of the servers is showing a 100% loss of data. I'm no expert on this, but it seems simple enough to understand, this step in our path 217.32.145.46 (a BT server) seems to be blocking our communication. Before I explode down the phone to BT, it would be handy to have some confirmation that this is indeed the case. Here's the data:

1 BThomehub.home [192.168.0.254]
2 217.32.145.2
3 217.32.145.46
4 212.140.235.202
5 213.120.180.169
6 217.41.169.109
7 acc2-xe-0-3-1.sf.21cn-ipp.bt.net [109.159.251.237]
8 core2-te0-2-4-0.ealing.ukcore.bt.net [109.159.251.143]
9 peer1-xe4-0-1.redbus.ukcore.bt.net [109.159.255.122]
10 195.66.224.209
11 85.205.0.86
12 * * *
Computing statistics for 275 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 emporium9.home [192.168.0.11]
0/ 100 = 0% |
1 0ms 0/ 100 = 0% 0/ 100 = 0% BThomehub.home [192.168.0.254]
0/ 100 = 0% |
2 16ms 0/ 100 = 0% 0/ 100 = 0% 217.32.145.2
0/ 100 = 0% |
3 --- 100/ 100 =100% 100/ 100 =100% 217.32.145.46
0/ 100 = 0% |
4 14ms 0/ 100 = 0% 0/ 100 = 0% 212.140.235.202
0/ 100 = 0% |
5 18ms 0/ 100 = 0% 0/ 100 = 0% 213.120.180.169
0/ 100 = 0% |
6 16ms 0/ 100 = 0% 0/ 100 = 0% 217.41.169.109
0/ 100 = 0% |
7 16ms 0/ 100 = 0% 0/ 100 = 0% acc2-xe-0-3-1.sf.21cn-ipp.bt.net [109.159.251.237]
0/ 100 = 0% |
8 27ms 0/ 100 = 0% 0/ 100 = 0% core2-te0-2-4-0.ealing.ukcore.bt.net [109.159.251.143]
0/ 100 = 0% |
9 28ms 0/ 100 = 0% 0/ 100 = 0% peer1-xe4-0-1.redbus.ukcore.bt.net [109.159.255.122]
0/ 100 = 0% |
10 25ms 0/ 100 = 0% 0/ 100 = 0% 195.66.224.209
100/ 100 =100% |
11 --- 100/ 100 =100% 0/ 100 = 0% 85.205.0.86

Trace complete.

Thanks,

Mike

[gommog]

@thecrown

No that's not the case at all, what you actually want to look at (and this will be better looking in the command prompt window) is the Lost/Sent column under Source to Here, i.e the 0/ 100 figure. 0/100 means there was no packet loss from your location to the destination.

Where you see a figure of 100/ 100 it means there was no response of ICMP traffic, this likely means that ping responses have been disabled on this device. For example i've done this on our company firewalls to stop denial of service attacks.

Check out this http://blog.petermcdonald.co.uk/2011/10/09/how-a-path-ping-works/ for a full explanation.

@Wayne Any chance of answering my question or am i just being ignored now?

[gommog]

@AnyVodafoneEmployee

Can someone please give me an answer to my question? What exactly is it you'd like me to ask my ISP? They are not blocking any traffic from us and they have no idea what a vodafone sure signal is let alone how it works, that should be vodafone's job to explain exactly what the steps are for registration.

[Retired-Charles]

@gommog - How many Sure Signal devices are you attempting to use on the same router?

[gommog]

@Charles

We have around 25 sure signal devices, we haven't found issues with this number in the past, we've had a few sure signals stop working and a few that have been disabled by vodafone after they thought they weren't in use for some time. It's a business router so the traffic produced should not be a problem on a 50Mb leased line.

[Retired-Charles]

@gommog - A few things concern me with your issue. We never recommend using more than 1 Sure Signal per address, let alone 25 of them.

If you've got a Vodafone Business account, contact your Business Account Manager to see if there is an alternative route for you.

Your issues have only seemed to happen when you've changed supplier, this points towards either your ISP or the reregistration of your Sure Signals. This is where your Business Account Manager would come in.

Hope that helps in some form. Not the best input but the best that we can offer on this forum.

[gommog]

@Charles

If that's the case i've certainly not read that anywhere and we've happily been sold more than 25 sure signals for business use. I can't see why you wouldn't recommend more than 1 sure signal per IP? I've got 200 PCs and laptops along with 70+ servers all using the same IP for outgoing traffic without any issues, you'll find that most medium size businesses have, traffic is routed based on the packet header information. Thanks for the reply but it shows a complete lack of understanding how internet traffic is routed.

Again i can see why you think changing our ISp might be the cause of our problems but again this shows a complete lack of understanding of how traffic is routed (or not in this case) between networks. We've already tried our business account manager, they told us there is no whitelist for IP addresses so again there's a complete lack of understanding/communication in vodafone departments. If this is the best you can do on this forum how about pointing me toward someone at Vodafone who can help me and countless others sort out problems with sure signal devices?

[Retired-Charles]

@gommog - With your issue being more complex than others, this is why I'd recommend speaking with your Business Account Manager and request that they find the solution for you.

Ask them to take on your request and find the solution for you.

[gommog]

@Charles

We have done, they have little to no clue, they didn't even know about the whitelist and still don't despite us telling them and pointing them toward this forum for evidence of this. Can we just get a contact at Vodafone who can help us with sure signal devices? Does such a person exist?

[thecrown]

@Wayne

Hi Wayne, thanks for your reply. The unit is still not operating and continues to cycle through the connection process. It's good news that it seems to have connected with your server last night and I understand that it takes sometimes 24/48 hours for the connection to be stable, but this SS has been connected to the net for nearly a week now without providing a stable (all 3 lights - 1,2,4) on state. The unit appears to work properly, continually trying to make the connection (see my previous post regarding the light indicators while doing this). Our cellular signal here is virtually non existent, when we originally obtained the unit it provided excellent reception in the house. It was only when we changed Broadband providers that it stopped working which is why I thought our IP address may be being blocked for not being on your white list. As we also work from home having good mobile reception is essential, if we can't get this working then it looks like we will have to break the over 20 year relationship with Vodafone and go with a provider that can actually provide a service 😞