GNU bug report logs - #65056
https://issues.guix.gnu.org/ cannot be accessed through Tor

Previous Next

Package: guix;

Reported by: Altadil <Altadil <at> protonmail.com>

Date: Fri, 4 Aug 2023 16:59:02 UTC

Severity: serious

Done: Giovanni Biscuolo <g <at> xelera.eu>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Ludovic Courtès <ludo <at> gnu.org>
To: Tobias Geerinckx-Rice <me <at> tobias.gr>
Cc: guix-sysadmin <guix-sysadmin <at> gnu.org>, Altadil <Altadil <at> protonmail.com>, 65056 <at> debbugs.gnu.org
Subject: bug#65056: https://issues.guix.gnu.org/ cannot be accessed through Tor
Date: Sun, 13 Aug 2023 02:25:51 +0200

[Message part 1 (text/plain, inline)]
Hi,

(Cc: guix-sysadmin.)

Tobias Geerinckx-Rice <me <at> tobias.gr> skribis:

> On 2023-08-04 18:57, Altadil via Bug reports for GNU Guix wrote:

[...]

>> The result is an error message saying: "The connection has timed out".
>> It looks like a general block of Tor rather than a block of specific
>> IPs, since attempting with different Tor circuits does not change the
>
> The Guix project does not block Tor.  If the datacentre has decided to
> block Tor like it blocked most of Russia, there is little we can do
> but ask them to reconsider.

I think it’s worse than this.  I noticed that ci.guix.gnu.org (same
machine) would occasionally time out on my side, without Tor, starting
from this week (I was on vacation before, so I don’t know exactly when
it started).  From a browser, I get this “DoS attack” HTML page:


[ci.guix-dos-attack.png (image/png, inline)]
[Message part 3 (text/plain, inline)]
The HTML doesn’t contain clues as to where it originates from.

--8<---------------cut here---------------start------------->8---
$ wget -qO- http://ci.guix.gnu.org | tail
        </style>
        <title>Attack Detected</title>
    </head>
    <body><div class="message-container">
    <div class="logo"></div>
    <h1>Blocked because of DoS Attack</h1>
    <p>Your computer has been blocked because a DoS attack originating from your system was detected. For more information, contact the system administrator.</p>
</div></body>
</html>
--8<---------------cut here---------------end--------------->8---

Some firewall-ish network equipment must be sitting right before our
machine.  It’s a problem because fetching narinfos and nars is likely to
count as a “DoS attack”.

Could it be some change at the MDC?

Thanks,
Ludo’.
This bug report was last modified 1 year and 291 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.