[arch-mirrors] Investigating questionable rsync behavior

[Easy Lee]

Hi,

It does seem to happen to the same client IPs. Thank you for pointing me into that direction! I can't reproduce it either from my local machines.

On Sun, Apr 11, 2021, at 7:56 AM, brent s. via arch-mirrors wrote:
> On 4/10/21 3:27 AM, Easy Lee via arch-mirrors wrote:
> > Hi everyone,
> > 
> > I noticed something strange going on with rsyncd on my mirror but I am not sure if it is an actual issue on my end. Someone able to give advice?
> > 
> (SNIP)
> 
> Does this always occur with the same client IP? If so, it sounds like an
> issue with that client's networking. Namely either a faulty line or,
> more likely a forged RST. The latter occurs in a good amount of
> corporate firewalls, particularly to manage bandwidth quota-ing (and
> happens to be the preferred method the "Great Firewall of China", a.k.a.
> the firewall component of China's Golden Shield Project, uses to sever
> connections).
> 
> That'd be my guess, though, and first step - determine if it's always
> the same client address or ASN registration.
> 
> -- 
> brent saner
> https://square-r00t.net/
> GPG info: https://square-r00t.net/gpg-info
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.archlinux.org/pipermail/arch-mirrors/attachments/20210411/d1253c61/attachment.htm>