Unable to connect to einsteinathome.org:443

Stef
Stef
Joined: 8 Mar 05
Posts: 206
Credit: 110568193
RAC: 0
Topic 217553

Hi,

Since this moring I can't connect https://einsteinathome.org from my home network. From other ISPs it works.

Port 80 works, but it is redirected to SSL port 443.

$ netcat einsteinathome.org 443 einsteinathome.org [129.89.61.70] 443 (https) : Connection refused

Any ideas what to do?

Holmis
Joined: 4 Jan 05
Posts: 1118
Credit: 1055935564
RAC: 0

If the problem still persists

If the problem still persists then try to reboot both the computer/s and the network gear.

If that doesn't help then try to enable some more extensive log messages in Boinc Manager by clicking on the Options menu and then on the Event log options...
Select http_debug and maybe http_xfer_debug then click save. Once that's in place go to the Projects tab, click on Einstein@home and then click the Update button. Then open the Event log and post the relevant messages fot the connection attempt.

Stef
Stef
Joined: 8 Mar 05
Posts: 206
Credit: 110568193
RAC: 0

The boinc-client doesn't have

The boinc-client doesn't have a problem to connect the server, i think it is using a different server (einstein10.aei.uni-hannover.de)

It's only the web browser to access statistics and the forum. I get an ICMP message code 3 type 3 directly from 129.89.61.70 (einstein.phys.uwm.edu) stating that port 443 was not reachable; I can only explain it with a blacklist.

Maybe the server doesn't like that i'm behind a CGNAT (no public IPv4-address from my ISP)?

 

EDIT: now it works again

EDIT2: now it doesn't anymore. The server doesn't like me.

Oliver Behnke
Oliver Behnke
Moderator
Administrator
Joined: 4 Sep 07
Posts: 942
Credit: 25166626
RAC: 0

Hi Stef, The address your

Hi Stef,

The address your trying to reach is part of a University network which we don't have direct control over. I can imagine they employ some greylisting to prevent DOS attacks. Should that be the case then anyone sharing your CGNAT IP, and that could be many, behaving suspiciously/badly would cause you to be blocked as well.

I'll forward your IP to hopefully get some feedback on potential filtering.

Cheers,
Oliver

 

 

Einstein@Home Project

Oliver Behnke
Oliver Behnke
Moderator
Administrator
Joined: 4 Sep 07
Posts: 942
Credit: 25166626
RAC: 0

Update: your IP (not you)

Update: your IP (not you) indeed tripped a DOS protection at our end which means it's blocked for a day. It was last unbanned on 2018-12-18 09:24:07 UTC and banned again on 2018-12-18 09:31:08 UTC, so within seven minutes. That most likely means that your IP is still issuing HTTP/GET requests in an excessive rate. OTOH, I don't see any evidence for that, so I unbanned your IP for the time being.

Just curious: did you disable your browser's cache? That could cause a higher request rate that might have tripped our DOS protection.

Anyone else who ran into this problem? If our DOS protection would be overzealous I'd expect this to be a know problem, but this is the first time I hear of this. Also, right now there are only 3 other IPs blocked only and a total of just 40 blocked recently, so I don't think this is something that should occur via "normal" use, otherwise we'd see more "victims".

Hope this helps,
Oliver

 

Einstein@Home Project

Stef
Stef
Joined: 8 Mar 05
Posts: 206
Credit: 110568193
RAC: 0

Thanks Oliver, it works

Thanks Oliver, it works now.

Yes, the browser cache was indeed disabled.

Oliver Behnke
Oliver Behnke
Moderator
Administrator
Joined: 4 Sep 07
Posts: 942
Credit: 25166626
RAC: 0

Aha, good that we found the

Aha, good that we found the likely culprit.

 

Einstein@Home Project

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.