problems browsing specific websites

Forums › Spark New Zealand (including Skinny and BigPipe) › problems browsing specific websites

peterdownunder

6 posts

Wannabe Geek

#299289 26-Aug-2022 15:48

I am a programmer working from home and have a spark broadband fibre connection.

I have duckdns setup of an external dynamic dns service and am running openwrt as my router.

I have been having ongoing issues with websites not responding, typically just timing out. One example is one of my hobbies at linuxcnc.org

It seems to be an ip address block, as I have been able to fix it by resetting the fibre link causing a new IP address to be allocated, but it eventually happens again.

I have checked a few blacklist sites and I appear occasionally on a few. None explicitly state why you are blocked, but a common statement is running email servers behind dynamic ip address' can be a problem.

While I am running quite a few debian boxes in my home none of them are running sendmail as far as I can see (or responding to port 25)

I decided to look at getting a static and went to the spark.co.nz and got blocked there :) with the following response:

The requested URL was rejected. Please consult with your administrator.

Your support ID is: 11784306756968730858

[Go Back]

Needless to say a call to spark went nowhere (don't really blame them)

Most recently when trying to install kubernetes the opensuse site would not respond to the download request. ssh'ing to a server over the work vpn and trying the same install from a linux box there worked ok.

Anyone got any ideas what to try next.

Currently thinking using a process of elimination i.e.

1 kill as many servers as I can and still work, reset the ip and see if it comes back.

2 stop the dynamic dns update for a while and see if that has anything to do with it ?

Tinkerisk

4798 posts

Uber Geek
+1 received by user: 3660

#2959851 26-Aug-2022 15:55

Do you have IPv4 and IPv6?

- NET: FTTH & VDSL, OPNsense, 10G backbone, GWN APs
- SRV: 12 RU HA server cluster, 0.1 PB storage on premise
- IoT: thread, zigbee, tasmota, BidCoS, LoRa, WX suite, IR
- 3D: two 3D printers, 3D scanner, CNC router, laser cutter

RunningMan

9184 posts

Uber Geek
+1 received by user: 4834

#2959874 26-Aug-2022 16:08

Not accessing www.spark.co.nz with that error was reported here https://www.geekzone.co.nz/forums.asp?forumid=39&topicid=296057

May be related.

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#2959904 26-Aug-2022 16:30

What are you running? You been messing around with tor or any proxy services?

Sounds like to me you've done something to lower your IP Reputation...

Check your IP against https://www.ipqualityscore.com for example and my bets are you've ruined the reputation of your IP address or been given an IP that has a bad reputation (if you didn't actually do this).

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

SirHumphreyAppleby

2938 posts

Uber Geek
+1 received by user: 1860

#2959969 26-Aug-2022 20:02

michaelmurfy:

Check your IP against https://www.ipqualityscore.com for example and my bets are you've ruined the reputation of your IP address or been given an IP that has a bad reputation (if you didn't actually do this).

Grain of salt stuff IMO. My IP and everything else around it (at least the entire /24, and seemingly more) scores a healthy 65 "Suspicious IP" and claims my address is listed in multiple blacklists, which it's not.

One VPS in Las Vegas scores 65, and another setup recently manages an impressive 99 "Abusive IP". The latter might be believable given it may have been used somewhat recently for 'bad' behaviour, but it's been at least 8 months.

peterdownunder

6 posts

Wannabe Geek

#2959971 26-Aug-2022 20:14

RunningMan:

Not accessing www.spark.co.nz with that error was reported here https://www.geekzone.co.nz/forums.asp?forumid=39&topicid=296057

May be related.

Seems the same, although fixed by removing the block, with no real explanation as to how it got there

Tinkerisk

4798 posts

Uber Geek
+1 received by user: 3660

#2959973 26-Aug-2022 20:26

I had it with IPv6 and MTU size alignment. Some sites responded others not.

AliExpress

Shop now on AliExpress (affiliate link).

peterdownunder

6 posts

Wannabe Geek

#2959974 26-Aug-2022 20:27

michaelmurfy:

What are you running? You been messing around with tor or any proxy services?

Sounds like to me you've done something to lower your IP Reputation...

Check your IP against https://www.ipqualityscore.com for example and my bets are you've ruined the reputation of your IP address or been given an IP that has a bad reputation (if you didn't actually do this).

That ipquality site gives a bad result of 83% but says I am blocked by spamhaus, but when I go to the spamhaus link provided, it says no issues.

It also says that it detects a proxy connection, but that is unknown to me.

Am running a Cisco VPN to our company.

Have various linux boxes running, including at least 2 freeswitch Pbx's

Openmediavault, and Plex.

peterdownunder

6 posts

Wannabe Geek

#2959975 26-Aug-2022 20:29

Tinkerisk:

Do you have IPv4 and IPv6?

Yes have ipv4 and ipv6

peterdownunder

6 posts

Wannabe Geek

#2959977 26-Aug-2022 20:32

Note I have restarted the fibre link and got a new address. Spark is accessible, along with linuxcnc.org. Assume opensuse will now respond as well.

That bad reputation was after I reset the link and got the new address.

Don't know how long that will last

peterdownunder

6 posts

Wannabe Geek

#2959978 26-Aug-2022 20:33

Tinkerisk:

I had it with IPv6 and MTU size alignment. Some sites responded others not.

Would not expect the ip reset to fix it if that was the case.

darylblake

1172 posts

Uber Geek
+1 received by user: 410

Trusted

#2960374 28-Aug-2022 10:03

You need to isolate if its something caused by your network or not before saying is a problem with spark or an IP which may be on some block lists.

Ideally you would just use a regular modem, not your openwrt etc. And connect directly to the internet and try to replicate the issue. If you cannot, but can re-replicate the issue from inside your network, then its more than likely something you have done in your own network.

Have you done some traceroutes, are you using any proxys? you need to eliminate the problem then work your way back and see where it is re-introduced.