[tor-talk] Tor Relays (not just exit nodes) blocked on Healthcare.gov?

Wed Sep 11 18:52:59 UTC 2013

On Wed, 11 Sep 2013 14:00:56 -0400
Michael Wolf <mikewolf53 at gmail.com> wrote:

> I've been running a Tor Relay (not an exit node) from my home for quite
> a while now, and up to this point have not encountered any issues
> accessing any sites.  However, today I attempted to access
> https://www.healthcare.gov, and received a HTTP 403 response and a
> pretty standard 403 message.

It's even curiouser than that :)

# host www.healthcare.gov
www.healthcare.gov is an alias for www.healthcare.gov.edgekey.net.
www.healthcare.gov.edgekey.net is an alias for e7393.dscb.akamaiedge.net.
e7393.dscb.akamaiedge.net has address 23.55.119.205
e7393.dscb.akamaiedge.net has IPv6 address 2001:5003:102:184::1ce1
e7393.dscb.akamaiedge.net has IPv6 address 2001:5003:102:18f::1ce1

Looks like the Akamai CDN has blocked Tor relays from accessing some portion
of sites hosted by it. Aside from www.healthcare.gov, I found that www.fox.com
and the www.akamai.com itself are also affected and returning Error 403
(confirmed from five different non-exit relays).

But interestingly, most other sites on Akamai from a dozen or so which I tried,
are all still accessible.

---

# curl -v4 www.akamai.com
* About to connect() to www.akamai.com port 80 (#0)
*   Trying 80.150.193.163...
* connected
* Connected to www.akamai.com (80.150.193.163) port 80 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.26.0
> Host: www.akamai.com
> Accept: */*
> 
* additional stuff not fine transfer.c:1037: 0 0
* HTTP 1.1 or later with persistent connection, pipelining supported
< HTTP/1.1 403 Forbidden
< Mime-Version: 1.0
< Content-Type: text/html
< Content-Length: 277
< Expires: Wed, 11 Sep 2013 18:30:44 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Wed, 11 Sep 2013 18:30:44 GMT
< Connection: keep-alive
< 
<HTML><HEAD>
<TITLE>Access Denied</TITLE>

-- 
With respect,
Roman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20130912/1577c746/attachment.sig>