Hi everyone,
I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea.
All I get is this message:
* *
*Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server.
Reference # ____looong number______
I think I am on some blacklists. After I change my IP address all worked fine for only 2 days.
Can I do something about this?
Thank you for your help!
Kind regards Kalle
On 11/14/17 07:38, Patrice wrote:
Hi everyone,
I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea.
All I get is this message:
*Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server.
Reference # ____looong number______
I think I am on some blacklists. After I change my IP address all worked fine for only 2 days.
Can I do something about this?
Thank you for your help!
Kind regards Kalle
If you're running an exit, they probably saw abusive traffic, didn't like it, and blocked your IP. You could consider not running an exit relay from home.
If you're running a non-exit, then they're being dumb for blocking your IP when it is impossible for abusive traffic to come from your relay. Some webmasters who don't understand Tor do that, but there's not really anything we can do. Best I can suggest is you try talking to them, which isn't a very satisfying suggestion, I know.
Matt
Hi,
It's not the first time I hear about Non-Exit IP blocked (but may be some people here are more familiar with the subject) : I don't really know what are the most used interfaces/websites from which those administrators are getting the list of IP addresses before blocking them (are they downloading the full consensus list like tor clients or from another website ?).
May be websites proposing these lists should split them in 2 distinct lists, and normally show only exit nodes unless something very precise is asked by the user for seeing all tor relays including non exit. For lazy/angry administrators trying to definitely block all Tor IP addresses without considering giving any another time or second chance it would avoid some of these non exit relays blocked ? Of course ideally those administrators are doing some mistake and the problem is coming from them more than from anybody else (or may be bad users, too). But into the facts, when a mistake is repeatedly done, may be changing some things should be considered ? If possible of course (it's not always simple or quick).
Best regards, Julien ROBIN
Le 14/11/2017 à 13:45, Matt Traudt a écrit :
On 11/14/17 07:38, Patrice wrote:
Hi everyone,
I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea.
All I get is this message:
*Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server.
Reference # ____looong number______
I think I am on some blacklists. After I change my IP address all worked fine for only 2 days.
Can I do something about this?
Thank you for your help!
Kind regards Kalle
If you're running an exit, they probably saw abusive traffic, didn't like it, and blocked your IP. You could consider not running an exit relay from home.
If you're running a non-exit, then they're being dumb for blocking your IP when it is impossible for abusive traffic to come from your relay. Some webmasters who don't understand Tor do that, but there's not really anything we can do. Best I can suggest is you try talking to them, which isn't a very satisfying suggestion, I know.
Matt _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On Tue, Nov 14, 2017 at 2:26 PM, Julien ROBIN julien.robin28@free.fr wrote:
Hi,
It's not the first time I hear about Non-Exit IP blocked (but may be some people here are more familiar with the subject) : I don't really know what are the most used interfaces/websites from which those administrators are getting the list of IP addresses before blocking them (are they downloading the full consensus list like tor clients or from another website ?).
May be websites proposing these lists should split them in 2 distinct lists, and normally show only exit nodes unless something very precise is asked by the user for seeing all tor relays including non exit. For lazy/angry administrators trying to definitely block all Tor IP addresses without considering giving any another time or second chance it would avoid some of these non exit relays blocked ? Of course ideally those administrators are doing some mistake and the problem is coming from them more than from anybody else (or may be bad users, too). But into the facts, when a mistake is repeatedly done, may be changing some things should be considered ? If possible of course (it's not always simple or quick).
dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) exits. Some webmasters could use the first one by mistake. Fortunately today they provide only the list of exits: http://www.dnsbl.info/dnsbl-list.php
On Tue, 14 Nov 2017 14:45:44 +0000 Nagaev Boris bnagaev@gmail.com wrote:
dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) exits. Some webmasters could use the first one by mistake.
https://www.dan.me.uk/dnsbl still does, and some webmasters do use the first one.
dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) exits. Some webmasters could use the first one by mistake.
https://www.dan.me.uk/dnsbl still does, and some webmasters do use the first one.
Link related to this thread characterizing some blocking...
https://trac.torproject.org/projects/tor/wiki/org/doc/ListOfServicesBlocking... https://trac.torproject.org/projects/tor/wiki/org/projects/DontBlockMe
On November 14, 2017 4:38:54 AM PST, Patrice mailinglist@pboenig.de wrote:
Hi everyone,
I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea.
All I get is this message:
*Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server.
Reference # ____looong number______
I think I am on some blacklists. After I change my IP address all worked fine for only 2 days.
Can I do something about this?
That would be Akamai's wonderfully opaque IP reputation system. Unless you're an Akamai customer, there's no way to determine why your IP is blocked. I believe certain types of vulnerability scans / probes set it off, but I've never been able to figure it out for certain.
In theory, it should drop off the blocklist if the bad behavior stops, but this takes weeks to happen.
Concrete suggestions:
If you're running an exit node, give it it's own IP.
If you're not running an exit, check the devices on your network. One of them may have malware. I don't believe this block is a tor-specific block, it seems like actual malicious traffic needs to happen before it triggers.
--Sean
That‘s a good point! And that’s something that I can investigate. I can do something. :-) I will look up all my divices and I hope I will find some pests.
Kind regards Kalle
Hi everyone,
I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea.
All I get is this message:
*Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server.
Reference # ____looong number______
I think I am on some blacklists. After I change my IP address all worked fine for only 2 days.
Can I do something about this?
That would be Akamai's wonderfully opaque IP reputation system. Unless you're an Akamai customer, there's no way to determine why your IP is blocked. I believe certain types of vulnerability scans / probes set it off, but I've never been able to figure it out for certain.
In theory, it should drop off the blocklist if the bad behavior stops, but this takes weeks to happen.
Concrete suggestions:
If you're running an exit node, give it it's own IP.
If you're not running an exit, check the devices on your network. One of them may have malware. I don't believe this block is a tor-specific block, it seems like actual malicious traffic needs to happen before it triggers.
--Sean
tor-relays@lists.torproject.org
-
grarpamp -
Julien ROBIN -
Matt Traudt -
Nagaev Boris -
Patrice -
Roman Mamedov -
Sean Greenslade