Kitz Forum

Internet => Web Browsing & Email => Topic started by: vic0239 on November 30, 2018, 04:48:34 PM

Title: Sites being mysteriously blocked
Post by: vic0239 on November 30, 2018, 04:48:34 PM
I have a really weird problem with my Internet access. A few weeks ago I was completing an online purchase and when I clicked on the usual "Continue Shopping" type button to return to the site home page I received a timeout. Since then I have been unable to access that site either by name or IP, it is unreachable. Then today I was working on John's SiteWorx when the same thing happened, but this is much more serious as I can't now access my email or anything else on that IP either! However, both sites are accessible through my VPN connection and on my mobile (3g), so it must be being blocked elsewhere. I have rebooted everything with no success and am now stumped and hoping for some enlightenment from the forum. This is affecting all devices. No changes have been made to my setup, it just happened out of the blue mid-session.
Thanks ... Andy.
Title: Re: Sites being mysteriously blocked
Post by: d2d4j on November 30, 2018, 05:05:41 PM
Hi Vic

I think you may have triggered our IDS/IPS which will drop your connection

If you can bear with me and I will check just after 6pm tonight if alright.

Many thanks

John
Title: Re: Sites being mysteriously blocked
Post by: vic0239 on November 30, 2018, 05:08:41 PM
Thanks John.
Could that have been triggered by getting my ftp password wrong once or twice?
Andy.
Title: Re: Sites being mysteriously blocked
Post by: d2d4j on November 30, 2018, 07:33:59 PM
Hi Vic

Sorry for late reply. If it is IDS/IPS blocking you, you should be able to access about 6pm tonight.

We do not give explicit details out sorry, but it would take more then 2  failed attempts on any 1 or more services email ftp etc... buy it is accumulative in a 24 hour period

What usually happens to self block is set up say email account, password wrong but they leave it, so it keeps trying and building up failed attempts. Same with ftp, where it can keep trying and same with dslstats, if saved using wrong password. If dslstats, please be aware curl keeps the connection, so it is possible to very quickly block you if wrong.

My advice is always if unsure, reset password.

Most of our clients like the idea of been blocked quickly as it protects their sites quicker against attackers

I hope thatís alright but if it helps, and you have a static ip, if you let pm the IP address I will add it to whitelist so you would not be blocked on that IP address

Many thanks

John
Title: Re: Sites being mysteriously blocked
Post by: vic0239 on November 30, 2018, 09:16:02 PM
Thanks John, all working ok now. I was ďmucking aboutĒ with ftp after reading one of the other threads on the stats web interface, but wasnít aware of the implications of getting things wrong. Iíll take more care in future. Iíll PM my IP in any case.

Many thanks for your help.

I wonder if something similar has happen with the other site (rhetorical)? Unlikely when just placing an order, surely.
Title: Re: Sites being mysteriously blocked
Post by: burakkucat on November 30, 2018, 09:19:04 PM
I wonder if something similar has happen with the other site (rhetorical)? Unlikely when just placing an order, surely.

Agreed, it's very unlikely.
Title: Re: Sites being mysteriously blocked
Post by: d2d4j on November 30, 2018, 09:55:50 PM
Hi Vic

Many thanks and now added to whitelist.

If your using dslstats, you can use sftp on port 24 and please remember the hosting folder is HTML. Anything outside of this root folder will not be accessible to the outside world. Above the root folder is normally to store scripts which the hosting accessed as needed but remains private. Eg billing software etc

As bcat states, itís extremely unlikely to be IDS/IPS. Interestingly if you were using IE/edge, you could try the inprivate browser section and it may connect

Many thanks

John
Title: Re: Sites being mysteriously blocked
Post by: vic0239 on December 01, 2018, 11:59:19 AM
Thanks John.

Tried using Edge (in a VM), but no go, INET_E_RESOURCE_NOT_FOUND returned. It's not a site I visit often so no big deal.