cancel
Showing results for 
Search instead for 
Did you mean: 

Website blocked

chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

Added to my hosts file (eventually! Win10 hates users being in charge of their own PC) but still doesn't work

Gandalf
Community Gaffer
Community Gaffer
Posts: 26,563
Thanks: 10,265
Fixes: 1,599
Registered: ‎21-04-2017

Re: Website blocked

Thanks for the update, I've just tested this on my home connection and I'm unable to load the site and I've got a static IP, the IP of the site 52.168.148.33 works fine though. @Kelly let me know if you need me to do any testing too. Smiley

From 31st October 2022, I no longer have a regular presence here as I’ve moved on to a new role.
Anoush Mortazavi
Plusnet
chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

Any further testing you want me to try?

spraxyt
Resting Legend
Posts: 10,063
Thanks: 674
Fixes: 75
Registered: ‎06-04-2007

Re: Website blocked

The site loads for me at home where I have a static IP in the range 212.159.x.x. However nslookup results in

C:\nslookup wiki.ispace.org 212.159.6.10
Server:  cdns02.plus.net
Address:  212.159.6.10

Non-authoritative answer:
Name:    ispace.org
Address:  72.52.178.23
Aliases:  wiki.ispace.org

which is a makedly different IP from the  52.168.148.33 mentioned in message #13 https://community.plus.net/t5/Everything-else/Website-blocked/m-p/1704363#M23187

David
chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

So does that imply a DNS issue?

Mads
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 1,873
Fixes: 79
Registered: ‎06-08-2018

Re: Website blocked

Hey @chrisboote,

To be honest I'm not sure what the next steps with this would be, it seems @Kelly was working on something behind the scenes or may have been investigating something. Might be worth awaiting his response.

 

Thanks.

blu3andp1p
Hooked
Posts: 9
Thanks: 2
Registered: ‎27-01-2020

Re: Website blocked

I can't visit the page either, it's not blocked though.

 

Looks like it might be something todo with their DNS server, their aname and nameserver records seem to be fudged.

 

https://dnsmap.io/#A/www.wiki.lspace.org

Kelly
Hero
Posts: 5,497
Thanks: 380
Fixes: 9
Registered: ‎04-04-2007

Re: Website blocked

Seems like I managed to delete my reply when I deleted what I thought was a double post Cheesy

I asked one of our engineers to have a look and they think there is something wrong with their DNS records:

Looks to be a DNSSEC configuration problem with the authoritive DNS server for this domain. This means that our servers aren’t able to validate the chain of security from the authoritive servers upwards. At a guess this is intermittent due to older cached records which may well be the problem as some may be correct, and some not.

Testing it from one of our cachedns servers fails locally and against the nameservers Jon mentions, giving a SERVFAIL response:

root@cachedns07:~# dig wiki.lspace.org +cmd

; <<>> DiG 9.9.5-9+deb8u18-Debian <<>> wiki.lspace.org +cmd

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 74

;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

 

root@cachedns07:~# dig wiki.lspace.org +nocmd @dns1.registrar-servers.com

; <<>> DiG 9.9.5-9+deb8u18-Debian <<>> wiki.lspace.org +nocmd @dns1.registrar-servers.com

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20411

;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

 

Running the check with an additional flag to disable DNSSEC checking resolves locally, but still fails against the others:

 

root@cachedns07:~# dig wiki.lspace.org +nocmd +cd @dns1.registrar-servers.com

; <<>> DiG 9.9.5-9+deb8u18-Debian <<>> wiki.lspace.org +nocmd +cd @dns1.registrar-servers.com

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 65506

;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

 

root@cachedns07:~# dig wiki.lspace.org +nocmd +cd

; <<>> DiG 9.9.5-9+deb8u18-Debian <<>> wiki.lspace.org +nocmd +cd

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36985

;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 1

 

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4096

;; QUESTION SECTION:

;wiki.lspace.org.              IN          A

 

;; ANSWER SECTION:

wiki.lspace.org.  1522     IN          CNAME wiki.osiris-web.com.

wiki.osiris-web.com.       1547     IN          A              52.168.148.33

 

;; AUTHORITY SECTION:

osiris-web.com.               1548     IN          NS              dns1.registrar-servers.com.

osiris-web.com.               1548     IN          NS              dns2.registrar-servers.com.

 

Also confirmed this against the advertised IP’s for our DNS servers to make sure, with the same response received:

 

root@server52752:~# dig wiki.lspace.org +nocmd +cd @212.159.13.49

 

; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> wiki.lspace.org +nocmd +cd @212.159.13.49

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19297

;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;wiki.lspace.org.              IN          A

 

;; ANSWER SECTION:

wiki.lspace.org.  1460     IN          CNAME wiki.osiris-web.com.

wiki.osiris-web.com.       1485     IN          A              52.168.148.33

 

;; AUTHORITY SECTION:

osiris-web.com.               1486     IN          NS              dns1.registrar-servers.com.

osiris-web.com.               1486     IN          NS              dns2.registrar-servers.com.

Kelly Dorset
Ex-Broadband Service Manager
chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

But I can open it when I'm accessing with 4G, or from work

 

Only fails when opening it from PlusNet broadband

chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

Anything I can do? Or pass on to site owners?

chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

Is there nothing to be done to resolve this?

Mav
Moderator
Moderator
Posts: 22,371
Thanks: 4,725
Fixes: 514
Registered: ‎06-04-2007

Re: Website blocked


@Mav wrote:

Just checked the site using my PN static IP and no luck with similar message to the OP.


Just checked again and the site appears to be working normally now for me.

Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still

chrisboote
Dabbler
Posts: 11
Thanks: 1
Registered: ‎25-01-2020

Re: Website blocked

Not for me Sad

Kelly
Hero
Posts: 5,497
Thanks: 380
Fixes: 9
Registered: ‎04-04-2007

Re: Website blocked

Hi,

Have you tried reaching out to the site owners to see if they've something wrong on our side?

Kelly Dorset
Ex-Broadband Service Manager
Kelly
Hero
Posts: 5,497
Thanks: 380
Fixes: 9
Registered: ‎04-04-2007

Re: Website blocked

@chrisboote Another work around would be to enable safeguard and then turn off the filters (unless you want them on).  That means you'll be assigned a different set of DNS servers which might not see the issue?  (If this works, I'd be interested to see!)

Kelly Dorset
Ex-Broadband Service Manager