Web Blocking

[david.seale1]

Can someone explain the message I get when logging onto
Gardenweb.com and how to go about fixing it ?

It appears to say that NTL is an irresponsible ISP

Both Gardenweb and NTL tell me it is the others Fault !?!


David

[downquark1]

I get onto it fine, can you be more specific about the message?

[david.seale1]

Due to problems with your Internet accesss provider, we cannot allow you to access our site.



We strongly advise you to find another, more responsible, access provider. If you are an access provider, either you, your users, or the users of an upstream network have caused this problem. Please see that it is resolved to our satisfaction and so this block can be removed.

[Tricky]

Are you connecting via a different port? such as https://website:2086 or something? - If so, are you using a manual proxy in your browser config, if so try removing the manual proxy setting.

[downquark1]

Very strange message - is this a joke?

Are you are connecting to the right site? Checked for spyware?

[david.seale1]

BLLLGGGxx

Note Dunces cap after signature !

I don't usually change anything in there.

[david.seale1]

I run Ad-Aware each night.

[david.seale1]

I get the same message when using favourites, Address Panel or via Google.

I can get on at work but that is with a different provider

Dave

[david.seale1]

I have just received the following message from the webmaster at Gardenweb.com

"We came under a denial of service attack via cache4-bagu.server.ntli.net and
cache3-bagu.server.ntli.net."

"They (NTL) need to offer an explanation and show to us what they have done to prevent
a recurrance."

Does anyone out there know what this means and what action I should take now?

I'm a novice in this area

Dave

[Stuartbe]

Originally Posted by david.seale1

I have just received the following message from the webmaster at Gardenweb.com

"We came under a denial of service attack via cache4-bagu.server.ntli.net and
cache3-bagu.server.ntli.net."

"They (NTL) need to offer an explanation and show to us what they have done to prevent
a recurrance."

Does anyone out there know what this means and what action I should take now?

I'm a novice in this area

Dave

I would say that you need to forward the mail to abuse@ntlworld.com for investigation....

Seems a bit fishy now I think of it !! A DOS attack coming from a proxy !!!

This isn`t the first instance of web site's blocking access via NTL proxies that I have come across. I've experienced periods when both the IMDB and Slashdot have blocked access via NTL proxies. I guess the problem with the proxies that a lot of legitimate traffic originating from them could appear to be a single user making excessive requests to a single site, hence the blockage.

With the IMDB issue, I e-mailed their support pointing out that they had actually blocked a proxy and they soon unblocked it. Does this site know that they have blocked a proxy, or are they assuming they have blocked an individual customer?

Originally Posted by david.seale1

I have just received the following message from the webmaster at Gardenweb.com

"We came under a denial of service attack via cache4-bagu.server.ntli.net and
cache3-bagu.server.ntli.net."

"They (NTL) need to offer an explanation and show to us what they have done to prevent
a recurrance."

Does anyone out there know what this means and what action I should take now?

I'm a novice in this area

Dave

A DOS attack from a cache server - that is very unlikely - I would ask them to explain but it's probably a waste of time.

Just manually specify another proxy when you want ot connect to the site.

[Florence]

I have been getting emails about DOS attacks on me from my own proxy started with one every few days but now its likje 8 a day. Pem said not to worry he thought it was the router being too touchy now I am thinkng perhaps not..

From - Tue Mar 23 07:08:12 2004
X-UIDL: <20040323010131.QOYE5865.mta03-svc.ntlworld.com@smtp.ntlworld.com>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <***********@ntlworld.com>
Received: from smtp.ntlworld.com ([81.97.2.212]) by mta03-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with SMTP
id <20040323010131.QOYE5865.mta03-svc.ntlworld.com@smtp.ntlworld.com>
for <***********@ntlworld.com>; Tue, 23 Mar 2004 01:01:31 +0000
From: <***********@ntlworld.com>
To: <***********@ntlworld.com>
Subject: Firewall Denial of Service Log
Message-Id: <20040323010131.QOYE5865.mta03-svc.ntlworld.com@smtp.ntlworld.com>
Date: Tue, 23 Mar 2004 01:01:31 +0000

SYN Flood DETECTED on TUE MAR 23 01:02:10 2004
targeting 192.168.0.10,4438, sent from 62.252.192.4,8080

that was the last one yesturday........ not picked up todays yet..

[david.seale1]

Pem
How do I manually specify a different server ?
Dave

http://www.cableforum.co.uk/kb/12/ho...pecify-a-proxy