ISP blocking Chinese websites  WTF! - Page 1
Forum section: electronics / general

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 07:49:40 pm
content: I have discovered that my ISP is deliberately blocking access to such dubious sites as elegoo.com.I am currently investigating alternative service as unblocking them was not an option. They wouldn't tell me why it was blocked even though 2 supervisors confirmed they could reach it, but said they couldn't unblock them and refused to let me speak with anyone who could.heltec.org is another address I can't reach. I'd be very interested in what end users in the US are seeing and who their ISPs are..Reg :-(

author: ataradov
author_rank: Super Contributor
timestamp: April 11, 2023, 08:20:07 pm
content: Don't use your ISP's DNS server. This is a bad idea on many levels.I personally use Cloudflare's 1.1.1.1, which is consistently one of the fastest in my location. But there are many other public DNS servers out there.

author: abeyer
author_rank: Frequent Contributor
timestamp: April 11, 2023, 08:20:32 pm
content: You should almost always assume that your ISP's DNS service is garbage and use something else, if you aren't already... this is usually going to give a better experience even if you aren't already having problems. That alone is often enough to get around these sort of "blocks" that are sometimes no more than choosing not to resolve the addresses.VPNs are always an option, too.

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 08:43:07 pm
content: The block is being done via Cloudflare. The replies from 8.8.4.4 (google DNS) resolve to Cloudflare.Yahoo will accept mail from elegoo.com, but the routing tables forbid opening an http connection.I *thought* it was accidental until two different customer support supervisors said it was deliberate and not subject to appeal.Interestingly, if I do a lookup via google I can ping elegoo.com, but cannot open a port 80 connection.The world is looking more dystopian every day :-(It's rather scary that *any* IP adress can be blackholed by numerous actors.

author: bdunham7
author_rank: Super Contributor
timestamp: April 11, 2023, 08:49:37 pm
content: I use Google DNS (8.8.8.8 ) and had the same issue. Changed to 1.1.1.1 and I was able to accesswww.elegoo.com.Hmmm.

author: jonpaul
author_rank: Super Contributor
timestamp: April 11, 2023, 08:50:20 pm
content: 1.use 1.1.1.1, 4.4.4.4,8.8.8.8 DNS2. VPN3. most ChiCom sites are monitored by the CCPj

author: gamalot
author_rank: Super Contributor
timestamp: April 11, 2023, 08:53:39 pm
content: I tried to access elegoo.com and got an error message, but I can accesswww.elegoo.comwithout any problem. I am in Australia.

author: Bud
author_rank: Super Contributor
timestamp: April 11, 2023, 08:54:30 pm
content: Jonpaul I cant help but think you drink too much kool-aid.

author: wraper
author_rank: Unknown
timestamp: April 11, 2023, 08:58:09 pm
content: Yes, use Cloudflare 1.1.1.1 as main and Google 8.8.8.8 or 8.8.4.4 as backup DNS. Too much BS and surveillance when using majority of ISP DNS.

author: madires
author_rank: Super Contributor
timestamp: April 11, 2023, 09:01:25 pm
content: hostwww.elegoo.comCode:[]www.elegoo.com[] is an alias for shops.myshopify.com.shops.myshopify.com has address 23.227.38.74host elegoo.comCode:elegoo.com has address 23.227.38.65elegoo.com has address 104.17.232.2923.227.38.x is Shopify104.17.232.29 is CloudflareUsually one would point all entries to one platform. This looks weird!Edit: 23.227.32.0/19 is allocated to Shopify, but 23.227.38.0/23 is routed to Cloudflare.

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 09:06:06 pm
content: I can *ping* it. But can't connect with a browser using the same address. www has no effect.I am stipulating that I won't accept a contract if an installation cannot access the addesses being blocked and others. blocked.ALL the submitted addresses are redirected to Cloudflare and require an authentication header.

author: SiliconWizard
author_rank: Super Contributor
timestamp: April 11, 2023, 09:14:49 pm
content: I've been using OpenDNS for a few years.But just looked, and it apparently now belongs to Cisco?

author: Monkeh
author_rank: Super Contributor
timestamp: April 11, 2023, 09:27:04 pm
content: Quote from: rhb on April 11, 2023, 09:06:06 pmI'd be very surprised if an HTTPS connection were intercepted in such a manner.Wait.. you do connect via HTTPS exclusively when dealing with US ISPs, right?

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 09:37:01 pm
content: I use http/https unless other forms of interaction are more useful. I was quite happy with sendmail and ftp. But your own peer sendmail instance is long gone and ftp increasingly rare.I date from when they first allowed commercial entities on ARPANET and the name got changed to the Internet. At the time I used Usenet and bang path addresses.Big question in my mind is who is behind this?

author: themadhippy
author_rank: Super Contributor
timestamp: April 11, 2023, 09:39:14 pm
content: So much for " the land of the free"

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 09:40:24 pm
content: Quote from: Monkeh on April 11, 2023, 09:27:04 pmMissed a key part of your question. HTTP/HTTPS is determined by the website. What appears to be happening is blocking of port 80. I plan to poke it once I look up the appropriate query to send via telnet.

author: Monkeh
author_rank: Super Contributor
timestamp: April 11, 2023, 09:41:55 pm
content: Quote from: rhb on April 11, 2023, 09:40:24 pmNo, it's determined by what you ask your browser to do. HTTPS does not even use port 80.Any website which doesn't support HTTPS today is probably not worth visiting, and it likely won't be long before browsers won't allow HTTP by default.

author: thm_w
author_rank: Super Contributor
timestamp: April 11, 2023, 09:47:20 pm
content: And the ISP in question is?You tried on another device?

author: rhb
author_rank: Super Contributor
timestamp: April 11, 2023, 09:51:13 pm
content: Quote from: themadhippy on April 11, 2023, 09:39:14 pmAt least I can't be thrown in jail for using the wrong pronoun, yet. I intend to take up the issue with my representatives to DC.ISP is Optimum which apparently bought Suddenlink. I have *explicit statements from two different support supervisors that it would not be unblocked*.So I'm shopping Hughes and Starlink.

author: madires
author_rank: Super Contributor
timestamp: April 11, 2023, 09:51:25 pm
content: I've checked BGP: 23.227.38.0/23 is announced by AS13335 which is Cloudflare. So all DNS entries end up at Cloudflare.heltec.org points to 47.56.130.228 (Alibaba Cloud) and 47.56.0.0/16 is announced by AS45102 (Alibaba).

author: sleemanj
author_rank: Super Contributor
timestamp: April 11, 2023, 09:54:50 pm
content: Which is more likely, your ISP has gone out of their way, setting up special firewall rules and packet inspection in order to block access to an innocuous website of a 3D printer manufacturer, or; the 3D printer manufacturer, or shopify, or cloudflare, automatically blocked access to an IP range which happens to include your IP address because there was an influx of bots from said range.Occam's Razor. Your ISP almost certainly doesn't care enough about 3D printer manufacturers to go to any lengths to stop you accessing them.Don't trust what ISP support people tell you, they don't know shit, they just want to get you off the phone.

author: ve7xen
author_rank: Super Contributor
timestamp: April 11, 2023, 10:06:10 pm
content: Quote from: SiliconWizard on April 11, 2023, 09:14:49 pmSince 2015.If you just want a public resolver with similar security features, tryQuad9that is operated as a Swiss not-for-profit. This (and OpenDNS) don't claim or attempt to give you a pure DNS view though, which if you are anti-blocking-stuff is not what you want.@rbh: Aside from what your ISP has told you to get you off the phone, what evidence do you have thatwww.elegoo.comis 'blocked' by them? It seems highly unlikely that your ISP would be blocking anything hosted on CloudFlare or Shopify, and Elegoo is way too niche/small potatoes to attract a specific block. What troubleshooting have you done? What DNS resolution are you getting? What does the error look like? How do you know it's not that your ISP has been blocked by these sites and not the other way around?

author: RoGeorge
author_rank: Super Contributor
timestamp: April 11, 2023, 10:18:09 pm
content: Quote from: bdunham7 on April 11, 2023, 08:49:37 pmI've just clicked your link and the elegoo page opened. Browsing from EU/Romania. Firefox, Ubuntu 22.04.Here we have other things blocked by law, i.e holocaust denial or antisemitic content, hate speech, etc.@rhb- Usually, http is blocked by Firefox, has to be specifically enabled from about:config variables (do not enforce https or something)- Disable certificate website verification, unless you do online shopping.- Don't use Chrome, it has extra "protection", hard to remove. There are degooglified versions of Chrome, but I didn't try.- Another one browser to try is Wolf Browser, a Firefox with less call home.- Tor browser is also good to try, it uses tor network and tunnels the traffic to random output locations, and access the requested webpage from there. As a result, if you connect a few times, you may catch a connection outside US and escape the censorship.- Even better, VPN, where you can choose the output point deliberately outside US (as opposed to Tor browser, where the location is at random), but for VPN you'll have to pay a monthly subscription.I've heard in USA is in preparation some sort of "Patriot Act" but for Internet. If you access things not allowed by "The Ministry of Truth", $1mil and up to 20 years in jail, and you'll have no rights to question anything. No idea if this is true or not, I don't follow news, but watch the video linked here:https://www.eevblog.com/forum/blog/eevblog-tiktok/msg4796921/#msg4796921

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 12:21:59 am
content: At this point I'm just going to get Starlink. I don't see Musk blocking educational kit vendors.The present SCOTUS would never allow the sort of censorship you describe if properly presented for a decision. But the court may only make rulings in response to legal petitions. This is by design. If the petitioner presents a flawed argument it will be dismissed with the suggestion that it be reframed if the court feels the subject has merit. Or with prejudice if they think the basic premise lacks merit.I'm going to dig and then contact the people who are supposed to represent me. I am *not* happy and shall be persistent. And it's perfect grist for the news media.Reg

author: ataradov
author_rank: Super Contributor
timestamp: April 12, 2023, 12:36:41 am
content: Both sites mentioned here work for me with 1.1.1.1 DNS. For elegoo.com, I had to manually go tohttps://elegoo.com. Withut https, it breaks, but this break is on their side.The issue here seems to be site owner incompetence rather than some blocking.

author: Monkeh
author_rank: Super Contributor
timestamp: April 12, 2023, 12:45:50 am
content: Quote from: rhb on April 12, 2023, 12:21:59 amThat depends whether they agree with his politics or dare to share a dissenting opinion.

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 01:12:05 am
content: Two different supervisors at the ISP said it was deliberate blocking and there was no appeal from this policy.

author: ataradov
author_rank: Super Contributor
timestamp: April 12, 2023, 01:43:10 am
content: How exactly would they block it if you don't use their DNS and use HTTPS?And what ISP is that? How did you even manage to get to supervisors?

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 02:24:09 am
content: To deliver a packet there must be an address which is readable by all the routers. There is *NO* possible way to encrypt the IP addresses. You can and should encrypt the contents, but encrypting the address is simply not possible.Tor will obfuscate them, but with sufficient skill has been shown to be transparent if you have sufficient access and capacity to process all the intercepts.Bottom line is I'm not giving Optimum (nee Suddenlink) any more money. All call centers have "supervisors". On rare occasions I've encountered people who understood the nuts and bolts of IP routing. Maybe twice.

author: ataradov
author_rank: Super Contributor
timestamp: April 12, 2023, 02:29:53 am
content: If they really block by IP, then VPN would work, no need for Tor. And if ISP is that stupid, then VPN is a must anyway. But the real long term solution is to switch ISPs, which in the US is a bit of a pain.LOL, they also try to upsell you McAfee. Run, as fast as you can.It looks like they are only available in the NY area. Never heard of them, hope to never hear of them again.

author: BravoV
author_rank: Super Contributor
timestamp: April 12, 2023, 04:48:35 am
content: Quote from: jonpaul on April 11, 2023, 08:50:20 pmSince you carry French's flag, and with recent Macron's visit to Xi, now, your internet traffic to the evil chicom is an exempt from monitoring.

author: BravoV
author_rank: Super Contributor
timestamp: April 12, 2023, 05:04:58 am
content: Quote from: ataradov on April 11, 2023, 08:20:07 pmPsstt ... the glorious Cloudflare's 1.1.1.1 DNS, "shield you"from the super duper evil "Russia" sites, like the "villain" RT.COM and few others.You're now safe and must be nice to becenso... errr ... I mean, "protected" from the evil.

author: ataradov
author_rank: Super Contributor
timestamp: April 12, 2023, 05:08:56 am
content: Quote from: BravoV on April 12, 2023, 05:04:58 amI have no issues accessing RT. Works just fine. I have no issues accessing any Russian sites I need to access.

author: boB
author_rank: Frequent Contributor
timestamp: April 12, 2023, 05:26:42 am
content: I get an error when going tohttps://elegoo.com/There was a problem loading this websiteTry refreshing the page.If the site still doesn't load, please try again in a few minutes.But not if I usehttps://www.elegoo.com/I have seen this behavior many times beforeFor elegoo.com a tracert resolves to this elegoo.com myshopify.com [23.227.38.65]Or forwww.elegoo.comI get shops.myshopify.com [23.227.38.74]boB

author: coppercone2
author_rank: Super Contributor
timestamp: April 12, 2023, 05:48:52 am
content: are you sure you pressed the right button?

author: magic
author_rank: Super Contributor
timestamp: April 12, 2023, 08:38:47 am
content: Quote from: BravoV on April 12, 2023, 05:04:58 amNah, they only ban exotic fruit farming forums.Code:$ host rt.comHost rt.com not found: 3(NXDOMAIN) <--- thank EU for this$ host rt.com 1.1.1.1Using domain server:Name: 1.1.1.1Address: 1.1.1.1#53Aliases:rt.com has address 91.215.41.4BTW, elegoo.com andwww.elegoo.comwork here, though one of them gives some weird response from the server. But the connection is established OK.Both domains resolve to Cloudflare and Shopify and as noted before, it would be weird that OP's ISP would block some random IPs from those companies.

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 09:22:26 am
content: From Romania, also EU and common border with Ukraine, just like Poland has:Code:$ host rt.comrt.com has address 81.196.9.130$ host rt.com 1.1.1.1Using domain server:Name: 1.1.1.1Address: 1.1.1.1#53Aliases:rt.com has address 91.215.41.4rt.com mail is handled by 10 aspmx.l.google.com.rt.com mail is handled by 30 aspmx5.googlemail.com.rt.com mail is handled by 20 alt1.aspmx.l.google.com.rt.com mail is handled by 20 alt2.aspmx.l.google.com.rt.com mail is handled by 30 aspmx2.googlemail.com.rt.com mail is handled by 30 aspmx3.googlemail.com.rt.com mail is handled by 30 aspmx4.googlemail.com.

author: madires
author_rank: Super Contributor
timestamp: April 12, 2023, 12:00:25 pm
content: Quote from: RoGeorge on April 12, 2023, 09:22:26 am81.196.8.0/23 is RCS & RDS Business, while 91.215.40.0/22 is DDOS-GUARD LTD.

author: BravoV
author_rank: Super Contributor
timestamp: April 12, 2023, 12:29:53 pm
content: Quote from: madires on April 12, 2023, 12:00:25 pmTons of EU countries are blocked from accessing the evil RT.COM, this to protect the innocent citizens from being exposed tothe truth... errr ... devil propagandas. And the people also are not smart enough yet.

author: Halcyon
author_rank: Unknown
timestamp: April 12, 2023, 12:59:41 pm
content: Thankfully in Australia, we have net neutrality, at least for the most part. Government blocks on website is not a thing, rather it's on an optional basis. Some ISPs go along with it (to "protect the children"), many don't and there are no penalties for it. And unless you're living in a private housing development with some third-party fibre connection (and no access to the National Broadband Network), you literally have a choice of any ISP, anywhere in the country. There is not really such a thing as "one company owns the lines" and therefore has the monopoly in a particular geographic area.I consider traffic shaping part of net neutrality as well, some providers will give certain traffic lower priority on it's network (such as torrents) while others don't bother since they recognise it's not up to the provider to determine what traffic is "more important" to their customers. I can see why some providers (like satellite or wireless) might do it, since it's a very finite and shared medium, but there is no real reason to do it on fixed wire connections.

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 01:50:14 pm
content: Quote from: BravoV on April 12, 2023, 12:29:53 pmDoh, I didn't check any further, sorry. Now I've tried to open rt.com, and it doesn't work.Firefox says wrong certificate, while Brave says this:QuoteBrave at least gives one hope, "page will probably work later".

author: BravoV
author_rank: Super Contributor
timestamp: April 12, 2023, 01:59:12 pm
content: When it comes to internet checking againstcensoring.... protection against evil propaganda, you DO NOT need to prove with elite command line stuff, its lame.Just fire up your browser, type in the web site, if its working, it is working, as simple as that.Tip&tricks from internet maha guru.

author: madires
author_rank: Super Contributor
timestamp: April 12, 2023, 02:41:15 pm
content: Quote from: Halcyon on April 12, 2023, 12:59:41 pmIn Germany we have a simple DNS based 'blocking' of a few websites which fall into three categories. One is hardcore illegal stuff (child abuse), the next is massive copyright infringement (managed by an organization of ISPs and media corps, or by court judgments), and the last is dangerous content (currenty some Russion media as part of the sanctions).Quote from: Halcyon on April 12, 2023, 12:59:41 pmAbsolutely! However, it's a bit more complex as we need some traffic engineering for specific purposes. For example, all routing related things (routing protocols and other important stuff) get the highest priority by default, because they are needed to keep the network running. Another example is VoIP which also requires some prioritization for obvious reasons. If you're a carrier/ISP/telco you might have to adhere to SLAs.

author: BravoV
author_rank: Super Contributor
timestamp: April 12, 2023, 02:51:08 pm
content: Quote from: madires on April 12, 2023, 02:41:15 pmJust curious how dangerous those evil Russia medias are, is it like, once you read just few sentences, or even words in there, as the bad brainwash magic is so strong, then suddenly you will have strange, fuzzy feeling inside, and you become Putin's shill ?/sarc

author: Monkeh
author_rank: Super Contributor
timestamp: April 12, 2023, 03:46:17 pm
content: Quote from: coppercone2 on April 12, 2023, 05:48:52 amI wanted orange!

author: magic
author_rank: Super Contributor
timestamp: April 12, 2023, 04:13:27 pm
content: Quote from: RoGeorge on April 12, 2023, 01:50:14 pmYou can connect over HTTP to the IP directly and it shows a message, I presume it's something along the lines of "access unathorized by decision of Whatever Administration for Communication and Stuff". Is this what Romanian looks like?http://81.196.9.130/I suppose you would see the same if you forced unencrypted HTTP conneciton to RT.com.editI can connect just fine from here if I bypass the DNS fuckery

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 04:39:36 pm
content: Quote from: madires on April 12, 2023, 02:41:15 pmThis is not traffic shaping, it's blocking, Halcyon, it's censoring. Don't try to deflect the facts by twisting/stretching/redefining the meaning of words.Cutting and limiting communication was one of the pillars during Ceausescu regime, here, in Romania, some 30-40 years ago. West is doing the same now. I've seen this before. Wasn't fun, and didn't end well.

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 04:45:28 pm
content: Quote from: magic on April 12, 2023, 04:13:27 pmDoesn't work from here, I get a webpage with this Romanian text:QuoteWhich translates to "Unauthorized Access (title). Your access to this site was restricted based on Decision of the President of the National Authority for Administering and Regulations of Telecommunications - decision number 145/2021"No idea what 145/2021 is, and don't want to know. I don't care to read rt.com, I was never reading that anyway, but I do care about censorship.

author: magic
author_rank: Super Contributor
timestamp: April 12, 2023, 05:02:45 pm
content: It seems to mean that 144 domains have already been blocked in Romania by the early March (which is, IIRC, when the eurosoyuz ban on RT came into effect).editWait, 2021?Either it was banned before the war for some reason or the numbers don't mean what I think they do.Meh, whatever.

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 05:04:27 pm
content: Meanwhile I've searched with Google for the text of that Romanian decision from 2021. There is nowhere online, and I'm not the only one that couldn't find Decizia 145/2021:https://www.reddit.com/r/Romania/comments/i7qblc/jos_cenzura_sau_ce/And this is the official list of decisions from 2021, where I see no 145/2021https://www.cdep.ro/pls/legis/legis_pck.lista_anuala?an=2021&emi=5,362&tip=17&rep=0

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 05:10:25 pm
content: Quote from: magic on April 12, 2023, 05:02:45 pmYes, 2021. From here I see this:

author: madires
author_rank: Super Contributor
timestamp: April 12, 2023, 05:11:03 pm
content: Quote from: RoGeorge on April 12, 2023, 04:39:36 pmYes, and nobody disputes that. Net neutrality is mostly about traffic shaping, but can also comprise blocking based on your personal definition of net neutrality.

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 05:14:30 pm
content: Quote from: madires on April 12, 2023, 05:11:03 pmAs I was saying, one can not assign personal definitions to existing words. Blocking is not neutrality.

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 06:49:03 pm
content: I am an American with almost 400 years of familial presence. Censorship is abhorrent and illegal here. Somewhat constrained by the agenda of the current dominant political faction.I suspect that the problem stems from a spam or DDoS attack from a block of addresses. 10+ years ago the admins blocked them. Now no one knows why, but they are terrified of changing anything as they don't understand how it works.

author: Monkeh
author_rank: Super Contributor
timestamp: April 12, 2023, 06:51:47 pm
content: Quote from: rhb on April 12, 2023, 06:49:03 pm

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 07:02:49 pm
content: We had to fight two wars with you to get our point across. You may think free speech is bonkers, but we take it very seriously.The fact that free speech is almost non-existent at present is an aberration which hopefully will be corrected soon.In theory my political representatives will address the matter. It'll be interesting if Tom Cotton does anything. I'm not holding my breathe.Reg

author: Monkeh
author_rank: Super Contributor
timestamp: April 12, 2023, 07:06:21 pm
content: Quote from: rhb on April 12, 2023, 07:02:49 pmAnd still you miss your own party censoring books and firing teachers for allowing students to see a statue.

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 07:36:27 pm
content: You make more assumptions than are worth addressing.

author: Monkeh
author_rank: Super Contributor
timestamp: April 12, 2023, 08:35:20 pm
content: Quote from: rhb on April 12, 2023, 07:36:27 pmYou started with those. Along with bringing politics into this to begin with.

author: rhb
author_rank: Super Contributor
timestamp: April 12, 2023, 08:49:23 pm
content: Censorship is by nature political.

author: magic
author_rank: Super Contributor
timestamp: April 12, 2023, 09:13:34 pm
content: Quote from: RoGeorge on April 12, 2023, 05:14:30 pmIn practical terms, "net neutrality" is a political movement by Internet business owners, wannabe owners and software drones working for them, fighting against a world where consumer ISPs could extort Internet services for money under threat of deprioritizing their traffic, in order to secure additional revenue which would enable them to sell Internet access to consumers at dumping prices.The same business owners and worker drones have no problems with reasonablecensorshipcontent control, generally.Hope this helps

author: RoGeorge
author_rank: Super Contributor
timestamp: April 12, 2023, 09:25:41 pm
content: I know that part, thank you. Has to do with Internet speed, allegedly. Has nothing to do with blocking traffic for political reasons, and in the name of some ordinance from 2021 that is nowhere to be found online.

author: Halcyon
author_rank: Unknown
timestamp: April 12, 2023, 11:07:24 pm
content: Quote from: RoGeorge on April 12, 2023, 04:39:36 pmI did no such thing. I said shaping was "part of" the definition. Right after I spoke about blocking.It's notmydefinition, it's the widely accepted definition.

author: BravoV
author_rank: Super Contributor
timestamp: April 13, 2023, 02:28:43 am
content: Quote from: RoGeorge on April 12, 2023, 04:39:36 pmI find hard to believe, living under US empire, especially your country as US vassal state, you just realized, now, today that you do not have freedom ?Wow , the brainwashing part must be really-really good in there.Ceausescu regime was hell, but it was "local hell", and if you think under the US & EU regime is "better" hell ? Then I have a bridge to sell you.

author: madires
author_rank: Super Contributor
timestamp: April 13, 2023, 11:13:45 am
content: Quote from: RoGeorge on April 12, 2023, 05:14:30 pmBad day? Net neutrality is the opposite of traffic shaping and blocking. And it's not just about the consumer's internet access. There's also a lot of bad blood between some carriers/telcos/ISPs about this topic for more than two decades (peering vs. transit, selling traffic twice).

author: ebastler
author_rank: Super Contributor
timestamp: April 13, 2023, 07:48:12 pm
content: Quote from: ataradov on April 12, 2023, 12:36:41 amThat would be reassuring -- but would also point to massive incompentence of the ISP's technical support staff, who have apparently confirmed the blocking on two separate occasions?

author: ataradov
author_rank: Super Contributor
timestamp: April 13, 2023, 08:06:29 pm
content: Quote from: ebastler on April 13, 2023, 07:48:12 pmYeah, it is both here. ISP is some small time regional ISP that actually takes customer calls and has some delusional "protection" policies.But the fact that www and non-www domains resolve to different things is purely on the owner.

author: rhb
author_rank: Super Contributor
timestamp: April 14, 2023, 10:59:04 pm
content: Actually I'm guessing my ISP is now much larger. In my case prepending www has no effect. Yesterday I got a 3rd call from a"supervisor" who did not even know what DNS is. She just claimed they don't block sites despite obvious evidence that they do, but wouldn't let me to speak to anyone who understood how the Interner works.I'm going to get Starlink.

author: magic
author_rank: Super Contributor
timestamp: April 15, 2023, 04:00:50 am
content: IOW, no one has any idea what's going on and your "obvious evidence" is contrary statements from different representatives of the same company.tcpdump time? traceroute/tracepath?

author: Infraviolet
author_rank: Super Contributor
timestamp: April 15, 2023, 04:45:46 pm
content: I've often found alternative DNS doesn't help. My ISP was blocking a website about machine tool design as "adult content". A VPN is effective where changing DNS doesn't help. There are some reasonably trustworthy free VPNs for situations where the things you're accessing are blocked but are not something you need to keep secure. That is to say if you're visiting a website which is blocked to view articles or watch videos that's fine, but whether one could trust a free priced VPN if your primary email provider became blocked or your bank's website is another matter.rhb your ISP's claim "not to block sites" might be true from their perspective, often ISPs are reselling the service of another ISP. Your's might not block anything, but if the company that actually runs the infrastructure they resell is blocking then you'd still hit such blocks unless you VPN around them.

author: rhb
author_rank: Super Contributor
timestamp: April 15, 2023, 07:23:39 pm
content: Two "supervisors" said they could see the elegoo.com website. I asked them what they saw. So a block upstream is implausible.

author: mendip_discovery
author_rank: Super Contributor
timestamp: April 15, 2023, 07:30:20 pm
content: I am sure you have checked but you dont have an ad blocker or firewall app running?Remember a few weeks back when people were complaining that the forum had ended up on a block list.I did notice that the www and the root of the domain are different. That may well be a setup issue with shopify or the domain itself. I didn't get any issues going onto the site but I dont mess around with ad blockers and such, found too many of them did odd things to sites.

author: rdl
author_rank: Super Contributor
timestamp: April 16, 2023, 12:21:52 am
content: It's a bit sketchy of a site with elegoo.com giving a Shopify error page andwww.elegoo.comsort of working. It's a pretty horrible place though. I'd for sure not go there without a javascript blocker. I counted over 35 non-elegoo.com scripts attempting to run in the background. That just might be the worst I've ever seen.

author: amyk
author_rank: Super Contributor
timestamp: April 16, 2023, 09:10:45 am
content: Quote from: rhb on April 14, 2023, 10:59:04 pmEither it's feigning ignorance, or gross incompetence. How does one get to work for an ISP without knowing what DNS is?

author: magic
author_rank: Super Contributor
timestamp: April 16, 2023, 09:12:56 am
content: Who would work for minimum wage in some dodgy company's customer support while having any useful knowledge or skill?

author: rhb
author_rank: Super Contributor
timestamp: April 16, 2023, 06:57:16 pm
content: Quote from: magic on April 15, 2023, 04:00:50 amI ran nslookup, traceroute & ping using addresses from 8.8.4.4 (google). Ping worked, traceroute timed out a 30 hops most of which were obfuscated. Two supervisors said they could access the site, but rhe next one denied it all. The last one refused to try to connect.

author: SiliconWizard
author_rank: Super Contributor
timestamp: April 16, 2023, 08:10:23 pm
content: Anyway, ISPs blocking chinese websites is a joke compared to what the RESTRICT act is planning.

author: magic
author_rank: Super Contributor
timestamp: April 16, 2023, 08:31:18 pm
content: Well, ping working means the IP is reachable.Could there be some TCP problem? From here I can do the following:Code:$ telnet 23.227.38.74 80Trying 23.227.38.74...Connected to 23.227.38.74.Escape character is '^]'.GET / HTTP/1.0HTTP/1.1 400 Bad RequestDate: Sun, 16 Apr 2023 20:28:01 GMTContent-Type: text/htmlContent-Length: 155Connection: closeServer: cloudflareCF-RAY: 7b8f2c1b8b39bf35-WAW<html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>Connection closed by foreign host.It looks like cloudflare doesn't exactly like my manually type request for some reason, but the connection clearly works.

author: rhb
author_rank: Super Contributor
timestamp: April 16, 2023, 11:44:34 pm
content: My take is they are blocking port 80.

author: magic
author_rank: Super Contributor
timestamp: April 17, 2023, 07:41:52 am
content: Based on what exactly?These are the TCP ports that work for me. I tried telneting to each of them and the result was the same.Including port 443 - they send a message about unencrypted request on HTTPS port.Code:$ nmap 23.227.38.74Starting Nmap 6.40 ( http://nmap.org ) at 2023-04-17 09:33 CESTNmap scan report for shops.myshopify.com (23.227.38.74)Host is up (0.031s latency).Not shown: 996 filtered portsPORT STATE SERVICE80/tcp open http443/tcp open https8080/tcp open http-proxy8443/tcp open https-altNmap done: 1 IP address (1 host up) scanned in 10.59 secondsAlso install tcptraceroute and try it to port 80 (or others above) on this IP. This works for me, I get the full path from my home router through my ISP and some other networks all the way to shopify. Note that ordinary traceroute uses UDP or ICMP ping, which doesn't tell you much about what happens to TCP packets.

author: madires
author_rank: Super Contributor
timestamp: April 17, 2023, 10:02:46 am
content: Please don't forget that those IP addresses could be CDN reverse proxies, i.e. just the frontend of a hidden platform.

author: Monkeh
author_rank: Super Contributor
timestamp: April 17, 2023, 10:36:18 am
content: Quote from: rhb on April 16, 2023, 11:44:34 pmSo don't use port 80. I'm sure we covered this.