topic Re: Blocked website in Fibre

Blocked website

AlastairMutch — Mon, 25 Mar 2024 21:48:04 GMT

TalkTalk has suddently started blocking web access to a number of websites that I use daily. These are all on the same server / IP address. 5.77.55.132

How do I get this block removed and normal service restored.

The sites are:

https://www.scottishgliding.com

and a number of other sites on the same server.

I can access them OK via another internet provider.

I have turned off all the security tools for TalkTalk.

Alastair

Re: Blocked website

Divsec — Mon, 25 Mar 2024 21:09:23 GMT

Hi @AlastairMutch sad to say I cannot replicate and can access from chrome on Android.

Have you tried clearing your browser cache and even a different browser?

Re: Blocked website

AlastairMutch — Mon, 25 Mar 2024 21:24:39 GMT

Interesting. Perhaps an Edinburgh problem then.

Yes I tried two different computers using Chrome, Firefox and Edge. Same results on all of them. Email is also blocked as is file replication for our cloud filestore. All ports seem to be blocked, not just http 80 and https 443.

I haven't found any other sites being blocked.

If I connect either computer via my mobile phone hotspot the sites work perfectly.

If I connect the computer via a remote proxy the sites work perfectly.

So it appears to be a TalkTalk routing / blocking problem that just started but may be a fault with a bit of local kit.

Alastair

Re: Blocked website

Divsec — Mon, 25 Mar 2024 21:34:49 GMT

Sorry to state the obvious but did you try rebooting your router?

Re: Blocked website

AlastairMutch — Mon, 25 Mar 2024 21:44:44 GMT

Yes I rebooted the TT router before posting on here.

Alastair

Re: Blocked website

AlastairMutch — Mon, 25 Mar 2024 21:47:00 GMT

Full disclosure. I used to work in IT (and other stuff) before retiring. I look after the gliding club's IT infrastructure and servers.

Re: Blocked website

ferguson — Mon, 25 Mar 2024 22:27:14 GMT

I am loath to advise an expert like yourself, but are you using TalkTalk DNS servers, or others? I connected up via the link you posted just fine.

Re: Blocked website

AlastairMutch — Mon, 25 Mar 2024 22:43:27 GMT

Strange. I got notification of a message about DNS but when I logged in here it was gone. 🙂

No I'm not using the TT DNS server. I'm using google's

The various site names I'm trying to access are being resolved OK. I can ping and see the correct IP appearing and NSLookup gives the correct DNS records. I've also checked that there are no proxies set for the browser access.

Anyway in full expectation that this will never get fixed except when the faulty bit of equipment is eventually replaced, or the security on my account is fixed, or I change ISP I've put a work-around in place so that traffic to that one IP address for all of our sites route via a proxy server.

This sort of stuff is why I hate computers 🙂

Thanks for trying to help.

Alastair

Re: Blocked website

AlastairMutch — Mon, 25 Mar 2024 22:45:58 GMT

Ah. I replied to the wrong message - that's why the message ordering has gone weird and confused me. User error..

Sorry about that.

Re: Blocked website

ferguson — Mon, 25 Mar 2024 22:56:37 GMT

@AlastairMutch

An IT expert who hates computers? LOL, you are probably not alone! 🙂

It is an odd one this, let's not jump to any more conclusions before the support team here pick this up and advise further.

Re: Blocked website

Anonymous — Tue, 26 Mar 2024 06:49:23 GMT

Hi Alastair,

Can I just confirm, have you also tried powering down the router for a full 30 minutes as this will clear the current session?

Thanks

Michelle

Re: Blocked website

AlastairMutch — Tue, 26 Mar 2024 09:06:50 GMT

Hi Michelle,

No I hadn't tried turning off the router for 30 minutes. I have done this morning but, stupidly, didn't check if the fault was cleared before that.

It's now working OK again so that's (to me anyway) pretty amazing. I'm not sure if it was clearing the session or something else but either way thank you. I've turned off my work-around.

Regards,

Alastair

Re: Blocked website

Divsec — Tue, 26 Mar 2024 09:08:19 GMT

Hi @AlastairMutch great news.

Re: Blocked website

Anonymous — Tue, 26 Mar 2024 09:13:25 GMT

Hi Alastair,

I'm glad to hear this 🙂

Michelle

Re: Blocked website

AlastairMutch — Mon, 08 Apr 2024 13:48:28 GMT

Today at about 2pm it did exactly the same again. At the moment I am completely blocked from accessing that IP address - none of the services on the remote server are accesible - except that ping does seem to get a reply.

Some sort of data usuage / security algorithm getting it wrong perhaps?

I'll turn on my work-around again for now and try leaving the router off for 30 minutes over night.

Annoying though.

Alastair

Re: Blocked website

Chris-TalkTalk — Mon, 08 Apr 2024 14:24:01 GMT

Hi Alastair,

Sorry to hear this has happened again. Please let us know if the 30 minute shutdown resolves the issue (or not)

Chris

Re: Blocked website

AlastairMutch — Wed, 10 Apr 2024 06:21:50 GMT

Yes turning off the router for 30 minutes cleared the block. However I got up this morning and it has re-appeared. This isn't great and having the router off for an extended period during the day isn't a good solution.

Something is obviously triggering some protection algorithm somewhere - DOS false trigger ? I'm using quite a lot of different ports on the remote server for various services.

Alastair

Re: Blocked website

Anonymous — Wed, 10 Apr 2024 06:53:55 GMT

Hi Alastair,

I'm sorry to hear this. Have we ever sent you a replacement router? If not then I think we should try this to rule this out.

Michelle

Re: Blocked website

AlastairMutch — Wed, 10 Apr 2024 07:27:09 GMT

Hi Michelle,

It's my original router which has been working great (well up to now) for several years.

Yes, if we could try a new one and see if it stops doing it that would be good.

Regards,

Alastair

Re: Blocked website

Debbie-TalkTalk — Wed, 10 Apr 2024 07:54:46 GMT

Hi Alastair

Thanks for your reply.

The router is on its way, please allow 24-48hrs for this to arrive.

Let us know how the connection compares with this router.

Debbie