[159471] in North American Network Operators' Group
Re: Microsoft Product Activation server reachability
daemon@ATHENA.MIT.EDU (Yang Yu)
Fri Jan 11 12:13:05 2013
In-Reply-To: <C12CA40900F4E0448A2D4E66DFA6A59B17ECCE44CE@Demekin.FSI.local>
Date: Fri, 11 Jan 2013 12:12:44 -0500
From: Yang Yu <yang.yu.list@gmail.com>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
communication prohibited by filter is just an ICMP response code,
sadly Windows does not under it......
Type 3 (Destination unreachable)
Code 13 (Communication Administratively Prohibited - generated if a
router cannot forward a packet due to administrative filtering;)
ICMP echo request for this ip seems to be filtered by Microsoft. TCP
connection to port 80 is working fine.
tcping wpa.one.microsoft.com
Probing 94.245.126.107:80/tcp - Port is open - time=3D98.491ms
Yang
On Fri, Jan 11, 2013 at 2:01 AM, Nathan Anderson <nathana@fsr.com> wrote:
>
> So the ICMP message "communication prohibited by filter" must be a normal=
response to ICMP ping through that gateway.
>
> Unfortunately, it's not completely fixed yet, but I'm guessing by this me=
asure of progress that they must be working on it. I now get HTTP 403 in r=
esponse to any request I send to it. Tried to reactive this copy of Window=
s Server once more anyway, and now get "Online activation cannot be complet=
ed at this time." (Message number: 24579) Before, it simply claimed I must=
not have working internet connectivity.
>
> -- Nathan
>
> -----Original Message-----
> From: Scott Howard [mailto:scott@doc.net.au]
> Sent: Thursday, January 10, 2013 10:55 PM
> To: Ben Carleton
> Cc: Nathan Anderson; nanog@nanog.org
> Subject: Re: Microsoft Product Activation server reachability
>
> Working now, tested from 3 hosts on different networks on both 80 and 443=
:
>
> $ telnet wpa.one.microsoft.com 443
> Trying 94.245.126.107...
> Connected to wpa.one.microsoft.com.
> Escape character is '^]'.
>
>
> Scott
>
>
>
> On Fri, Jan 11, 2013 at 12:02 AM, Ben Carleton <carleton@vanoc.net> wrote=
:
>
>
> ----- Original Message -----
> > From: "Nathan Anderson" <nathana@fsr.com>
> > To: "nanog@nanog.org" <nanog@nanog.org>
> > Sent: Thursday, January 10, 2013 11:24:16 PM
> > Subject: Microsoft Product Activation server reachability
> >
> > Anybody else having a problem reaching (what appears to be) the=
sole
> > Microsoft Product Activation server (wpa.one.microsoft.com)?
> >
> > $ ping wpa.one.microsoft.com
> > PING wpa.one.microsoft.com (94.245.126.107): 56 data bytes
> > 36 bytes from 213.199.189.41: Communication prohibited by filte=
r
> >
> > I get this sourcing from our network, from AT&T 3G, and from ye=
residential
> > DSL connection located in the greater Seattle area. They aren't=
simply
> > source-filtering. Either that or they are source-filtering for =
0.0.0.0/0.
> >
> > This is apparently the only server/IP they have set up to respo=
nd to these
> > requests. wpa.one.microsoft.com resolves to that IP via every D=
NS server
> > I've tried (so no round-robin A records), Microsoft products th=
at need to
> > activate over the internet only try to resolve that FQDN, and I=
've looked
> > for others without success (wpa.two.microsoft.com isn't valid, =
for example).
> >
> > --
> > Nathan Anderson
> > First Step Internet, LLC
> > nathana@fsr.com
> >
> >
>
>
> I am seeing the same from NYC metro. According to MS (http://tech=
net.microsoft.com/en-us/library/bb457159.aspx#ECAA), access to that host on=
80 and 443 is all that should be required to activate. (and wpa.one.micros=
oft.com has no AAAA, go figure)
>
> [ben@razor ~]$ ping wpa.one.microsoft.com
>
> PING wpa.one.microsoft.com (94.245.126.107) 56(84) bytes of data.
>
> From 213.199.189.41 icmp_seq=3D2 Packet filtered
> ^C
> --- wpa.one.microsoft.com ping statistics ---
> 6 packets transmitted, 0 received, +1 errors, 100% packet loss, t=
ime 5260ms
>
> [ben@razor ~]$ telnet wpa.one.microsoft.com 80
> Trying 94.245.126.107...
> ^C
> [ben@razor ~]$ telnet wpa.one.microsoft.com 443
> Trying 94.245.126.107...
> ^C
>
> -- Ben
>
>
>
>
>
