LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Projects > LinuxQuestions.org > Bug
User Name
Password

Notices


RSS 403 error from Cloudflare Issue Tools
issueid=261 01-16-2022 07:43 AM
Member
RSS 403 error from Cloudflare

Hello,

I hope this is the right place to post.

Since some time, my tt-rss feed retriever is receiving 403 Forbidden error when trying to retrieve the feeds from LQ.
Looking around they all say it generally happens when the owner of the site managed by CloudFlare has set some protection configuration or has blocked some specific ip.

Code:
root@front:~# wget https://www.linuxquestions.org/questions/external.php?f=14
--2022-01-16 14:37:32--  https://www.linuxquestions.org/questions/external.php?f=14
Resolving www.linuxquestions.org (www.linuxquestions.org)... 104.24.137.8, 104.24.136.8, 172.67.81.99, ...
Connecting to www.linuxquestions.org (www.linuxquestions.org)|104.24.137.8|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-01-16 14:37:32 ERROR 403: Forbidden.
Could anyone please unblock my static ip subnet for retrieving the feeds?

(Upon contact I will send the ip subnet via private message)
Issue Details
Project LinuxQuestions.org
Category Forums
Status Fixed
Priority Unknown
Affected Version Unknown
Fixed Version (none)
Users able to reproduce bug 1
Users unable to reproduce bug 0
Assigned Users (none)
Tags (none)

01-27-2022 10:49 PM
Member
 
This has nothing to do with your particular ip address.

I am on a different continent and get the same error message.

Code:
bash $ /usr/bin/wget -O /dev/null "https://www.linuxquestions.org/"
--2022-01-28 11:42:03--  https://www.linuxquestions.org/
Resolving www.linuxquestions.org... 104.24.136.8, 172.67.81.99, 104.24.137.8, ...
Connecting to www.linuxquestions.org|104.24.136.8|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-01-28 11:42:04 ERROR 403: Forbidden.
Access to LQ thru TOR is also blocked by clownflare.

This is definitely something that jeremy has enabled/configured on clownflare.
Reply
01-29-2022 12:47 PM
root
 
TOR is not currently blocked. To confirm, the issue is not related to your IP address. Will follow-up with additional information.

--jeremy
Reply
01-29-2022 09:59 PM
Member
 
You must be using a different TOR then:
Code:
Please turn JavaScript on and reload the page.
DDoS protection by Cloudflare
Ray ID: 6d57a8b7dfa49217
Code:
bash $ /usr/bin/torsocks /usr/bin/lynx -head -dump "https://www.linuxquestions.org/questions/project.php?issueid=261"                                                                                                                         
HTTP/1.1 503 Service Temporarily Unavailable                                                                                                                                                                                                  
Date: Sun, 30 Jan 2022 03:34:00 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
...
And the following without TOR:
Code:
bash $ /usr/bin/lynx -head -dump "https://www.linuxquestions.org/questions/project.php?issueid=261"                                                                                                                                           
HTTP/1.1 403 Forbidden                                                                                                                                                                                                                        
Date: Sun, 30 Jan 2022 03:34:11 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
...
Your site, your rules.

BUT - you should state clearly what your rules are and stop hiding behind clownflare.

Then we can each make up our own damn mind if we want to continue using your site or not.

I will not enable javascript just so that clownflare can collect all kinds of data on me and "approve" me. I enable cookies for "linuxquestions.org" only, NOT for clownflare. All my cookies are session-only.

And you do know that clownflare is a mitm attacker. All traffic is decrypted on clownflare's servers. That includes usernames and passwords.

PS: by rules I mean - what browser to use, what cookies to enable, enable/disable javascript.
Reply
08-24-2022 04:58 PM
Member
 
For the sake of a complete information, in the end I resolved by creating a proxy feed through Google Feedburner.
Nobody dares to 403 at Google ;-)
Reply
Reply

  



All times are GMT -5. The time now is 07:20 PM.

Main Menu
Advertisement
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration