IRRd-Discuss

[Randy Bush]

Larry J. Blunk wrote:
> Randy Bush wrote:
>>> This would indicate that either IRRd is down, or
>>> you are submitting from a different host and don't
>>> have a write-access acl defined on the IRRd server.
>>>     
>>
>> irrd is up.  i can see it in ps, and i can get data via port 43
>>
>> i am submitting from the local host.
>>
>> here is the tcpdump, looks like good telnet setup and then close
>>
>> 09:02:14.481784 IP work0.psg.com.64607 > 255.255.255.255.nicname: S
>> 2919510585:2919510585(0) win 65535 <mss 1460,nop,wscale
>> 3,sackOK,timestamp 1534531140 0>
>> 09:02:14.482105 IP 255.255.255.255.nicname > work0.psg.com.64607: R
>> 0:0(0) ack 2919510586 win 0
>> 09:02:14.482496 IP work0.psg.com.64608 > 255.255.255.255.nicname: S
>> 2218083423:2218083423(0) win 65535 <mss 1460,nop,wscale
>> 3,sackOK,timestamp 1534531141 0>
>> 09:02:14.483103 IP 255.255.255.255.nicname > work0.psg.com.64608: R
>> 0:0(0) ack 2218083424 win 0
>> 09:02:14.483605 IP work0.psg.com.64609 > 255.255.255.255.nicname: S
>> 784599131:784599131(0) win 65535 <mss 1460,nop,wscale 3,sackOK,timestamp
>> 1534531142 0>
>> 09:02:14.483978 IP 255.255.255.255.nicname > work0.psg.com.64609: R
>> 0:0(0) ack 784599132 win 0
>   I'd expect the connections to be going from/to
> 127.0.0.1.   That the default allowed host in the
> write-access ACL.

that 255.255.255.255 set off my alarms. which is why i sent it to you.

the write access acl is

access-list 12 permit 127.0.0.1/8
access-list 12 permit 147.28.0.35/32
access-list 12 permit 147.28.0.41/32
access-list 12 deny all
!
irr_database RGNET write-access 12

same result if i comment out the above lines.

and this is a server from which radb is successfully mirroring

randy