Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
Mr Snotty
8024 posts

Uber Geek
+1 received by user: 4011

Moderator
Trusted
Lifetime subscriber

  Reply # 2107205 13-Oct-2018 11:29
Send private message quote this post

noroad:

 

Shapenz: I can’t PM you the result page for some reason but I can confirm IP Chicken shows the same external IP address

 

OK, well there is no CGNAT involved then.

 

I can tell you now - there is. I can see multiple people from Geekzone logging in via the same IP. It is CGNAT with a configuration issue it seems.





2066 posts

Uber Geek
+1 received by user: 343

Lifetime subscriber

  Reply # 2107211 13-Oct-2018 11:39
Send private message quote this post

 

 

 

100.64.0.0/10

 

100.64.0.0–100.127.255.255

 

 

 


390 posts

Ultimate Geek
+1 received by user: 210

Trusted

  Reply # 2107225 13-Oct-2018 12:14
Send private message quote this post

michaelmurfy:

 

noroad:

 

Shapenz: I can’t PM you the result page for some reason but I can confirm IP Chicken shows the same external IP address

 

OK, well there is no CGNAT involved then.

 

I can tell you now - there is. I can see multiple people from Geekzone logging in via the same IP. It is CGNAT with a configuration issue it seems.

 

 

 

 

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!


471 posts

Ultimate Geek
+1 received by user: 145


  Reply # 2107228 13-Oct-2018 12:36
quote this post

MyRepublic in Chch.

 

IP Chicken address:  101.100.131.xxx

 

ASUS router WAN address:  10.11.140.xxx

 

So CGNAT used here.


Mr Snotty
8024 posts

Uber Geek
+1 received by user: 4011

Moderator
Trusted
Lifetime subscriber

  Reply # 2107236 13-Oct-2018 12:53
One person supports this post
Send private message quote this post

noroad:

 

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!

 

No, not even that.

I suspect the OP has been given a "static IP" from the CG-NAT pool or has dropped back to CG-NAT during the move. There is no static IP here.





390 posts

Ultimate Geek
+1 received by user: 210

Trusted

  Reply # 2107240 13-Oct-2018 13:01
Send private message quote this post

michaelmurfy:

 

noroad:

 

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!

 

No, not even that.

I suspect the OP has been given a "static IP" from the CG-NAT pool or has dropped back to CG-NAT during the move. There is no static IP here.

 

 

 

 

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.


Mr Snotty
8024 posts

Uber Geek
+1 received by user: 4011

Moderator
Trusted
Lifetime subscriber

  Reply # 2107243 13-Oct-2018 13:07
Send private message quote this post

noroad:

 

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.

 

What I am saying is that external 101 IP address is indeed CG-NAT. 

 

inetnum: 101.100.128.0 - 101.100.131.255
netname: CGNAT_PURE_MYR_NZ
descr: CGNAT Pure Bundle MyRepublic NZ
country: NZ
admin-c: MNZL2-AP
tech-c: MNZL2-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-MYREPNZ-NZ
mnt-irt: IRT-MYREPNZ-NZ
last-modified: 2016-05-25T10:00:52Z
source: APNIC

 

That, and there are about 30 users on here all logging in with the same IP address. Smells like proper CG-NAT to me with a configuration issue to hand this IP out to the OP as a "Static IP".





390 posts

Ultimate Geek
+1 received by user: 210

Trusted

  Reply # 2107252 13-Oct-2018 13:29
One person supports this post
Send private message quote this post

michaelmurfy:

 

noroad:

 

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.

 

What I am saying is that external 101 IP address is indeed CG-NAT. 

 

inetnum: 101.100.128.0 - 101.100.131.255
netname: CGNAT_PURE_MYR_NZ
descr: CGNAT Pure Bundle MyRepublic NZ
country: NZ
admin-c: MNZL2-AP
tech-c: MNZL2-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-MYREPNZ-NZ
mnt-irt: IRT-MYREPNZ-NZ
last-modified: 2016-05-25T10:00:52Z
source: APNIC

 

That, and there are about 30 users on here all logging in with the same IP address. Smells like proper CG-NAT to me with a configuration issue to hand this IP out to the OP as a "Static IP".

 

 

 

 

I understand that you are saying the IP is from a range MR has indicated will be used for cgnat, but that does not mean that they are actually using all those IP's in a cgnat pool. If the OP is getting a public IP (like the 101) on his external interface but it is being translated to another public IP still then that is messed up. He has said however that that public ip is being identified by ipchicken as being the IP it sees, so that path in particular is not being natted even if the whois for it indicates its from a pool designated for use with cgnat. Apnic records are rarely updated by ISP's in my experience (and being guilty of being said person not updating them).




203 posts

Master Geek
+1 received by user: 21


  Reply # 2107255 13-Oct-2018 13:34
Send private message quote this post

Sorry guys my fault for misunderstanding the question.

Ipchicken shows the same external address as Plex reports.

The DHCP allocated WAN address in the router is completely different (10.11......)

Sorry to lead you astray @noroad

I’ve seen the info through to MR to sort out anyway so hopefully they can fix their muck up.

Thanks for all the help!

5154 posts

Uber Geek
+1 received by user: 1673


  Reply # 2107261 13-Oct-2018 14:01
One person supports this post
Send private message quote this post

Shapenz: [snip]
The DHCP allocated WAN address in the router is completely different (10.11......)

 

So that confirms it, you don't have a public IP address.


'That VDSL Cat'
8916 posts

Uber Geek
+1 received by user: 1955

Trusted
Spark
Subscriber

  Reply # 2107306 13-Oct-2018 15:42
Send private message quote this post

Helps to double check your getting your ip from the right place :)

I was considering asking if amplify did something silly like pulling from a site.

Just to be clear plex does call out to check the external ip. That's why it was the same.

Myrp really should use the cgnat range on your wan interface though...




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


390 posts

Ultimate Geek
+1 received by user: 210

Trusted

  Reply # 2107320 13-Oct-2018 16:08
Send private message quote this post



Myrp really should use the cgnat range on your wan interface though...

 

 

 

Yea, it's pretty bad form using RFC1918 addresses on CGNAT services instead of the dedicated 100.64.0.0/10 range. That is really asking for hard to diagnose conflicts for no good reason.

 

 

 

 




203 posts

Master Geek
+1 received by user: 21


  Reply # 2110523 18-Oct-2018 15:04
Send private message quote this post

All sorted now - took a couple of days and a bit of mucking around running tests and plugging / un-plugging things as suggested - but it's all fixed now.

 

They said "Seems to have been a DDoS on the old IP address" - kinda weird that it happened at the same time as I moved houses but who am I to question the internet......

 

 

 

 


331 posts

Ultimate Geek
+1 received by user: 79


  Reply # 2110564 18-Oct-2018 16:19
One person supports this post
Send private message quote this post

I'm surprised they didn't blame it on a solar flare.


1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.