[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Tor Relays (not just exit nodes) blocked on Healthcare.gov?

On Wed, 11 Sep 2013 14:00:56 -0400
Michael Wolf <mikewolf53@xxxxxxxxx> wrote:

> I've been running a Tor Relay (not an exit node) from my home for quite
> a while now, and up to this point have not encountered any issues
> accessing any sites.  However, today I attempted to access
> https://www.healthcare.gov, and received a HTTP 403 response and a
> pretty standard 403 message.

It's even curiouser than that :)

# host www.healthcare.gov
www.healthcare.gov is an alias for www.healthcare.gov.edgekey.net.
www.healthcare.gov.edgekey.net is an alias for e7393.dscb.akamaiedge.net.
e7393.dscb.akamaiedge.net has address
e7393.dscb.akamaiedge.net has IPv6 address 2001:5003:102:184::1ce1
e7393.dscb.akamaiedge.net has IPv6 address 2001:5003:102:18f::1ce1

Looks like the Akamai CDN has blocked Tor relays from accessing some portion
of sites hosted by it. Aside from www.healthcare.gov, I found that www.fox.com
and the www.akamai.com itself are also affected and returning Error 403
(confirmed from five different non-exit relays).

But interestingly, most other sites on Akamai from a dozen or so which I tried,
are all still accessible.


# curl -v4 www.akamai.com
* About to connect() to www.akamai.com port 80 (#0)
*   Trying
* connected
* Connected to www.akamai.com ( port 80 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.26.0
> Host: www.akamai.com
> Accept: */*
* additional stuff not fine transfer.c:1037: 0 0
* HTTP 1.1 or later with persistent connection, pipelining supported
< HTTP/1.1 403 Forbidden
< Mime-Version: 1.0
< Content-Type: text/html
< Content-Length: 277
< Expires: Wed, 11 Sep 2013 18:30:44 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Wed, 11 Sep 2013 18:30:44 GMT
< Connection: keep-alive
<TITLE>Access Denied</TITLE>

With respect,

Attachment: signature.asc
Description: PGP signature

tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsusbscribe or change other settings go to