Menu
Reply
Superfast
  • 246
  • 14
  • 70
Registered: ‎11-11-2013
Message 41 of 49 (237 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

[ Edited ]

Thanks.  I wondered if this might add credence to the hypothesis that a MITM proxy is involved but the fact that your test reports that the 500 error is coming from Varnish is inconclusive. It tends to indicate that the 500 really is coming from apt.osmc.tv but it's still uncertain.

Reply
0 Kudos
Highlighted
Superuser
  • 13.25K
  • 689
  • 4.54K
Registered: ‎01-11-2009
Message 42 of 49 (224 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

@bromham It does possibly explain why the admin at osmc.tv doesn't see the http requests come in if he's checking the actual server rather than his edge proxy.

For example, if I do your test - BTW you can use -S as a shortcut

C:\Users\timdu>wget osmc.tv -S --ca-certificate c:\cacert.pem
SYSTEM_WGETRC = c:/progra~1/wget/etc/wgetrc
syswgetrc = C:\Program Files (x86)\GnuWin32/etc/wgetrc
--2017-05-19 20:34:45--  http://osmc.tv/
Resolving osmc.tv... 159.253.212.250
Connecting to osmc.tv|159.253.212.250|:80... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 302 Found
  Date: Fri, 19 May 2017 19:32:42 GMT
  Server: Varnish
  X-Varnish: 12354300
  Location: https://osmc.tv/
  Content-Length: 0
  Connection: keep-alive
Location: https://osmc.tv/ [following]
--2017-05-19 20:34:45--  https://osmc.tv/
Connecting to osmc.tv|159.253.212.250|:443... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 200 OK
  Server: nginx/1.10.2
  Date: Fri, 19 May 2017 19:32:42 GMT
  Content-Type: text/html; charset=utf-8
  Connection: close
  cache-control: public, max-age=0
  etag: W/"1be87-91E/525gGnDdM6k5TtCmXw"
  vary: Accept-Encoding
  Age: 5
  Accept-Ranges: bytes
Length: unspecified [text/html]

Tim

________________________________________


Only use Helpful answer if your problems been solved.

Reply
0 Kudos
Superuser
  • 13.25K
  • 689
  • 4.54K
Registered: ‎01-11-2009
Message 43 of 49 (184 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

@grindax - Before Virgin Media can escalate this, one of the things they will need is for you to try the hub in router mode as I requested earlier.  Now we can wait until one of the Forum Team jumps in the thread and let them ask directly, or we can try and get the information beforehand in order to save everyone some time.

Before Virgin Media can escalate this, one of the things they will need is for you to try the hub in router mode as I requested earlier.  Now we can wait until one of the Forum Team jumps in the thread and let them ask directly, or we can try and get the information beforehand in order to save everyone some time.

I'm eager to get to the bottom of this issue, and certainly, if you do end up with the same results, we can certainly push Virgin's Network team to look at this.  But they won't look without concrete evidence.

________________________________________


Only use Helpful answer if your problems been solved.

Reply
0 Kudos
On our wavelength
  • 68
  • 0
  • 8
Registered: ‎29-03-2012
Message 44 of 49 (141 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

A few weeks ago, after an internet outage, I tried the non-HTTPS version of the OSMC web site again (I'd actually continued trying pretty much every day to see if/when the problem would go away), and at that point the redirect to the HTTPS site worked correctly. So this means Virgin Media made some change in their network at that time to fix the problem.

But now the issue is back, although in a slightly different way.

Now when I try to access the non-HTTPS site, http://osmc.tv , I'm immediately redirected to this site:

http://www.virginmedia.com/shop/broadband/parental-control.html

By the way, all the "Web Safe" settings associated with my account are turned off. And changing from modem mode to router mode makes no difference. It's overdue for someone at Virgin Media to investigate what's going on. For now I'm having to use a VPN to not have my web browsing interfered with, and that is not acceptable.

Reply
0 Kudos
On our wavelength
  • 68
  • 0
  • 8
Registered: ‎29-03-2012
Message 45 of 49 (139 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

[ Edited ]

And now, a few minutes later, the redirection is working correctly again, and no longer sending me to the Parent Controls site. Is this going to keep alternating between working and not working. What is Virgin Media up to?

Reply
0 Kudos
Up to speed
  • 95
  • 4
  • 26
Registered: ‎11-07-2015
Message 46 of 49 (93 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

[ Edited ]

The independant newspaper cannot be reached with a 404 error message but the site is up and reachable if you use a VPN.  There is an error message from Varnish Cache (404) which is a HTTP accelerator. Its really is getting to the point that the web is more reliable over a VPN so that VM can't do deep packet inspection or anything else to your traffic.

http://www.isitdownrightnow.com/independent.co.uk.html - website up but down without VPN

vm.gif

Reply
0 Kudos
Superuser
  • 13.25K
  • 689
  • 4.54K
Registered: ‎01-11-2009
Message 47 of 49 (80 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

[ Edited ]

Can you post a tracert to independent.co.uk

The site loads for me.  And I'm not using a VPN

Also I'm assuming that you are using independent.co.uk as the url.  What happens if you try www.independent.co.uk instead.

Tim

________________________________________


Only use Helpful answer if your problems been solved.

Reply
0 Kudos
Superuser
  • 13.25K
  • 689
  • 4.54K
Registered: ‎01-11-2009
Message 48 of 49 (67 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

I ran a wget on the http://independent.co.uk  Here's what I see.

C:\Users\timdu>wget independent.co.uk -S
--2017-08-11 13:36:42--  http://independent.co.uk/
Resolving independent.co.uk (independent.co.uk)... 151.101.193.184, 151.101.129.184, 151.101.65.184, ...
Connecting to independent.co.uk (independent.co.uk)|151.101.193.184|:80... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 301 Moved Permanently
  Server: Varnish
  Retry-After: 0
  Location: //www.independent.co.uk/
  Content-Length: 0
  Accept-Ranges: bytes
  Date: Fri, 11 Aug 2017 12:36:42 GMT
  Via: 1.1 varnish
  Connection: close
  X-Served-By: cache-lhr6326-LHR
  X-Cache: HIT
  X-Cache-Hits: 0
Location: //www.independent.co.uk/ [following]
--2017-08-11 13:36:42--  http://www.independent.co.uk/
Resolving www.independent.co.uk (www.independent.co.uk)... 151.101.61.184
Connecting to www.independent.co.uk (www.independent.co.uk)|151.101.61.184|:80... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 200 OK
  Server: nginx
  Content-Type: text/html; charset=utf-8
  X-Drupal-Cache: MISS
  X-Content-Type-Options: nosniff
  Last-modified: Thu, 10 Aug 2017 23:32:00 GMT
  Content-Language: en
  X-Frame-Options: SAMEORIGIN
  X-Generator: Drupal 7 (http://drupal.org)
  Link: <http://www.independent.co.uk/>; rel="canonical",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/favicon.ico>; rel="shortcut icon",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-60x60.png>; rel="apple-touch-icon",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-72x72.png>; rel="apple-touch-icon_72x72",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-76x76.png>; rel="apple-touch-icon_76x76",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-114x114.png>; rel="apple-touch-icon_114x114",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-120x120.png>; rel="apple-touch-icon_120x120",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-144x144.png>; rel="apple-touch-icon_144x144",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-152x152.png>; rel="apple-touch-icon_152x152",<http://www.independent.co.uk/sites/all/themes/ines_themes/independent_theme/img/apple-icon-180x180.png>; rel="apple-touch-icon_180x180",</sites/all/themes/ines_themes/independent_theme/img/android-icon-36x36.png>; rel="android-icon_36x36",</sites/all/themes/ines_themes/independent_theme/img/android-icon-48x48.png>; rel="android-icon_48x48",</sites/all/themes/ines_themes/independent_theme/img/android-icon-72x72.png>; rel="android-icon_72x72",</sites/all/themes/ines_themes/independent_theme/img/android-icon-96x96.png>; rel="android-icon_96x96",</sites/all/themes/ines_themes/independent_theme/img/android-icon-114x114.png>; rel="android-icon_114x114",</sites/all/themes/ines_themes/independent_theme/img/android-icon-192x192.png>; rel="android-icon_192x192",</sites/all/themes/ines_themes/independent_theme/img/ms-icon-70x70.png>; rel="ms-icon_70x70",</sites/all/themes/ines_themes/independent_theme/img/ms-icon-144x144.png>; rel="ms-icon_144x144",</sites/all/themes/ines_themes/independent_theme/img/ms-icon-150x150.png>; rel="ms-icon_150x150",</sites/all/themes/ines_themes/independent_theme/img/ms-icon-310x310.png>; rel="ms-icon_310x310"
  X-Request-ID: v-9cb4a8f8-7e91-11e7-84ee-22000a2745e4
  X-AH-Environment: prod
  Via: 1.1 varnish-v4
  ETag: W/"1502454952-1"
  Content-Length: 347658
  Accept-Ranges: bytes
  Date: Fri, 11 Aug 2017 12:36:42 GMT
  Via: 1.1 varnish
  Age: 44
  Connection: keep-alive
  Set-Cookie:Locale=UK
  Cache-control: no-cache, no-store, max-age=0, must-revalidate
  Expires: Sun, 19 Nov 1978 05:00:00 GMT
  X-Served-By: cache-lhr6344-LHR
  X-Cache: HIT, HIT
  X-Cache-Hits: 18, 1
  X-Timer: S1502455003.963450,VS0,VE3
  Vary: Accept-Encoding, Locale, ines_tg
Length: 347658 (340K) [text/html]

Note this is common practice by site owners, in order to save users having to specifically enter the www. at the start of the url, they instead redirect the request to the www. form of the url instead.  The browser sees the redirect, and then proceeds to browse to the new url.

This is equivalent to the way that the http:// url for osmc.tv was redirected to the https:// version

Curiously that involved Varnish as well.

Tim

________________________________________


Only use Helpful answer if your problems been solved.

Reply
0 Kudos
Up to speed
  • 95
  • 4
  • 26
Registered: ‎11-07-2015
Message 49 of 49 (41 Views)

Re: Virgin Media is blocking and interfering with traffic to certain sites

[ Edited ]

I was using www.independent.co.uk (I know why you think independent.co.uk) but like all things internet related. Things are now back to working as they should. Everything is fine on or off the VPN. I normally give things a few days, enough for someone to finish a change and let convergence happen.

The error message from Varnish Cache of 404 tells me all I need to know. Proxy server cannot connect. The VPN lets me bypass this web accelerator proxy server which given that the VPN bypasses basically proxies/DNS servers on VM's network only. Likely leaves the issue on VM network. I have heard tell of a single national proxy server on VM's network. [1]

Ask yourself, who's proxy server this is, why it would affect a VM customer and why it cannot connect to that website on the day and time in question (my post date and time). If I can reach this proxy and are ment too, then I don't have a connection issue. You have all the information you need.

[1] https://ben.cheetham.me.uk/resources/ntl-proxy-list

Reply
0 Kudos