Company blocked from accessing Spark website

Forums › Spark New Zealand (including Skinny and BigPipe) › Company blocked from accessing Spark website

1 | 2 | 3

BDFL - Memuneh
76418 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2915148 17-May-2022 15:04

Ramjet99:

No, our firewall is Fortinet.

To reiterate - the same browser instance on the same machine CAN access spark.co.nz if we change the source public IP address and simply refresh the window - no other changes are necessary to get the site to work. We have tested different machines running different operating systems and different browsers (using inPrivate and portable versions) to rule out other possibilities - keeps coming back to the public IP address (or something beyond our vision anyway)

This is why we believe it to be something not liking our public IP (but no clue as to what/where that might be)

You keep saying public IP. Is the Fortinet appliance in all IPs you tested?

When you change the IP are you changing networks or network providers?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Norton

Get easy to use, easy to install Norton antivirus protection against advanced online threats (affiliate link).

CYaBro

4093 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2915150 17-May-2022 15:06

freitasm:

CYaBro:

Is it just the one computer or multiple with the same issue?

Have you seen this?

How to Fix 'The Requested URL Was Rejected. Please Consult With Your Administrator' Error on Windows? - Appuals.com

No, please. That looks like a search engine spam site with badly written guides.

Probably, was just the first link when I searched the error. :D

Ramjet99

78 posts

Master Geek

#2915151 17-May-2022 15:14

We have a /29 (IIRC) routed to our Firewall - all outgoing traffic out through common source IP. Let's say 5.5.5.5

Our firewall admin and I just tested changing the address one machine was NATed out through - so rather than the traffic from that machine coming out from 5.5.5.5 it came out from 5.5.5.6

This machine could then access spark.co.nz fine. Change the NATed address for that machine back to 5.5.5.5 and it gets that error again.

Same hardware, same network, same upstream router, same DNS servers and all was working fine until yesterday afternoon. Then stopped for no known reason.

freitasm

BDFL - Memuneh
76418 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2915158 17-May-2022 15:16

Thanks, that's a good description.

When changing the machine IP is it going through the firewall or taking a different path without the firewall?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

freitasm

BDFL - Memuneh
76418 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2915161 17-May-2022 15:20

Could you please try accessing just the homepage? Regardless of what you see, open Dev Tools and clear cooks for that site only and try again?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Ramjet99

78 posts

Master Geek

#2915166 17-May-2022 15:32

After a clear and refresh using Firefox portable - not wanting to make assumptions but that cookie name does begin F5 so may indeed be from an upstream F5 box ?

Ramjet99

78 posts

Master Geek

#2915167 17-May-2022 15:34

WRT to machine - the internal machine is not changing its private IP address or network at all, only the outgoing IP address to the Internet changes

freitasm

BDFL - Memuneh
76418 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2915169 17-May-2022 15:37

If you look on the request headers is there anything there that could be considered "personal information"?

If not, then yes, help from someone at Spark would be required.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

wellygary

7388 posts

Uber Geek

#2915171 17-May-2022 15:43

Ramjet99:

WRT to machine - the internal machine is not changing its private IP address or network at all, only the outgoing IP address to the Internet changes

What happens if you try a Ping or Trace route?,

Ramjet99

78 posts

Master Geek

#2915207 17-May-2022 15:58

Headers

freitasm

BDFL - Memuneh
76418 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2915210 17-May-2022 16:02

I think it would be good if @talkiet could get in contact for this one then.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Zeusssy

34 posts

Geek

ID Verified

#2915370 18-May-2022 07:28

Hi, I just saw this now,
I was dealing with a similar thing with an f5 issue yesterday.
Is problem ongoing still?

Ramjet99

78 posts

Master Geek

#2915377 18-May-2022 08:14

Yes, error still occurring

Zeusssy

34 posts

Geek

ID Verified

#2915385 18-May-2022 08:46

Can you send me a PM with contact details, ill be in contact through the official channel.

Talkiet

4690 posts

Uber Geek

Trusted

#2915415 18-May-2022 09:08

I brought this to the attention of the relevant team yesterday and it looks like someone there has also jumped in on this thread now so I will let them make contact.

Cheers - N

Please note all comments are the product of my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.

1 | 2 | 3