Is the ISP blocking traffic?
Posted on 2007-10-01
We provide an offsite backup service for our customers who are on support contracts.
All has been working fine, until last week when I noticed that one of the customer servers had not backed up for a number of days.
On further investigation I found that traffic between the customer server and the backup server was being blocked.
I can telnet both ways between servers using ports I know are open like smtp. However, as soon as the backup client connects to the backup server on port 2774 and starts transferring data, ALL traffic between the two servers is blocked. Cannot telnet either way.
If I wait 5 or 10 mins, the block is lifted - but again, as soon as the backup client connects to the server and starts transferring data, all traffic is blocked.
At the time of the block, I am able to reach both the customer server and backup server from other addresses. And am also able to connect from these servers to external addresses. Just can't connect between the two.
This particular customer's server had to transfer quite a large amount of data recently (around 10GB) - so I can only assume that the ISP (in this case BT) has noticed this and decided it looks a bit suspicious and blocked it. I have called BT and tried to find out if a restriction has been placed on the line but if you've ever phoned BT support before you'll know I didn't get very far.
Have tried changing the MAC address of the customer router and changing the port number to 2775 - but that didn't work.
Tried changing the port number to one for a known service i.e. 1723 for PPTP. This didn't work either.
There is a second server on the same ADSL line with a different static IP - this also uses the backup service but doesn't have any problems.
The only solution therefore seems to be to change the IP of the problem server.
What I'd like to know is - could this type of behaviour be caused by something other than an ISP block?