1

The problem seems to be that our home network is being blocked from high-profile sites that have really good security measures in place. For example, when I go to the Washington Post's website I get this ambiguous message:

Access Denied

You don't have permission to access "http://www.washingtonpost.com/" on this server.

Reference #18.7962317.1542307718.51d6f537

I experience similar behaviors when I also visit USPS.com, any email links originating from MailChimp servers, and most recently we've discovered that Oracle.com give us this equally ambiguous message:

This site http://www.oracle.com/ is experiencing technical difficulty. We are aware of the issue and are working as quick as possible to correct the issue.

We apologize for any inconvenience this may have caused.

To speak with an Oracle sales representative: 1.800.ORACLE1.

To contact Oracle Corporate Headquarters from anywhere in the world: >1.650.506.7000.

To get technical support in the United States: 1.800.633.0738.

Incident Number: 18.4c962317.1542307950.e2847c1

So the legwork that I've done so far in trying to trouble shoot this is as follows:

On my NetGear Router, there is an option to change the default MAC address for the router to copy/use my computer's MAC address. When I apply this change to the router, everything opens back up for about a day, and then by the next day the blockage has returned. When I revert back to the router's default MAC address, the issue remains.

I'm suspecting that this may have something to do with the family computer that is connected via Ethernet -- that there might be a virus or something else that is compromising the integrity of the network for everyone, but I cannot tell for sure.

When I do an IP Address blacklist check, the only negative result is from http://dnsbl.spfbl.net/en/45.59.88.92, which this is our IP address by the way. I don't think this is an IP address issue, but I'm really confused by what's going on. I'm not sure what to do for next step, as most Google searches derail me into a different direction.

Oh, I have another son who's using a VPN and he says that he is experiencing the same behavior on his computer as well.

My phone has the same issues when connecting through the local network. However when I switch my phone to connect via data, using the cell towers, the issue goes away. So it seems pretty obvious that somehow our local network has been blacklisted, but how do I assess this and find a cause/fix?

I've got a NetGear R6250 router. I'm web developer, but not much of a network guy. Thanks for your help!

|improve this question
  • Perhaps it's because you hand typed rather than copy and paste, but perhaps you should try httpS instead of http. Maybe those sites aren't configured properly to auto-connect to https if you type in http. Or maybe something is messed up with your browser security. – topshot Nov 15 '18 at 21:43
  • Did you get this figured out? topshot might be on to something. That is weird that http://www.washingtonpost.com doesn't redirect to https://www.washingtonpost.com for you, as it does redirect for me. Is something blocking port 443 (HTTPS) on your network and trying to force you to use port 80 (HTTP)? – browly Jan 31 at 19:12
  • Yes, the actual solution to our particular issue was to isolate the offending computer on our network (the kid's gaming pc). I then realized that Windows Defender had been disabled at the registry level. So for Windows 10, Windows Defender does a pretty good job of keeping things clean except for when it's been disabled. Once re-enabled, the system was cleaned up and suddenly the network was fine again. – Brent Feb 1 at 17:46
3

All of these sites are behind the Akamai CDN. The message and code indicates that your cite was blocked by Akamai. As for why Akamai might have done this see Why is Akamai blocking me?. Notably it might block an IP address if this IP was the source of potential malicious activity, like attempts to attack sites protected by Akamai (SQL injection, ...), web scraping, vulnerability scanning etc.

I recommend to check if any of such activity might have been purposefully originated from your network or if there is some infected system which (for example as part of a botnet) was misused by an outside attacker for such activity.

Akamai also provides a tool to check your IP address: Client Reputation Overview. Maybe you can get more information about the cause of blocking there.

When I apply this change to the router, everything opens back up for about a day, and then by the next day the blockage has returned. When I revert back to the router's default MAC address, the issue remains.

Given that the MAC address of your router visible to your ISP my only explanation for this behavior is that you automatically get assigned a new external IP address when the MAC changes. Given that this only works for a limited time it is likely that the issue causing the blocking is an ongoing problem in your network.

|improve this answer
  • Thanks Steffen! I've definitely given me a few more bits of information to pursue. Will report back with any new findings. – Brent Nov 15 '18 at 20:21
  • 1
    Akamai does seem to be partially responsible for this block, but the Client IP Reputation Lookup tool didn't return any negative results: "The IP Address 45.59.88.92 did not receive a bad risk score." Yet, I go to the Akamai home page and it doesn't fully load, and I'm getting a 403 forbidden error in the header. Very confusing. – Brent Nov 15 '18 at 20:32
0

Apparently your ISP is not providing a PTR record for your address in their DNS. These sites apparently desire that information. You might want to complain to your ISP. The PTR record does not have to point to something sexy or memorable, just a valid matching A record.

|improve this answer
  • Thanks tjd, I can't imagine that this is an ISP issue. I use our town's Internet service. I can't believe that I would be the only person experiencing this issue if it was our ISP, and if so that it would not have it resolved. Why do I get temporary access when I switch up the MAC Address? – Brent Nov 15 '18 at 19:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.