Author Topic: Strange hobbes.nmsu.edu behavior.  (Read 53836 times)

Digi

  • Jr. Member
  • **
  • Posts: 69
  • Karma: +4/-1
  • http://os2.snc.ru/
    • View Profile
    • OS/2 ports and applications
Strange hobbes.nmsu.edu behavior.
« on: February 03, 2020, 11:20:59 am »
Very strange situation with hobbes.nmsu.edu. No access from Russia and Ukraine. From other countries there is access. Letters are ignored and not even accepted by the server. Does anyone have any info on this?

Valery Sedletski

  • Sr. Member
  • ****
  • Posts: 368
  • Karma: +2/-0
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #1 on: February 03, 2020, 11:36:06 am »
I'm opening Hobbes successfully in Linux (Firefox 68 and Falkon browsers), via an american VPN. If I try opening Hobbes from OS/2 in
latest Firefox 45 from my own IP address (russian Tele2 cellular provider), it opens, but I got a SSL error:

Quote
Secure Connection Failed

The document contains no data.

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

    Please contact the website owners to inform them of this problem.

So, it opens from some places even in Russia, but SSL connection fails. Does it require a too latest SSL version?
Is anybody outside Russia and Ukraine able to open Hobbes from OS/2 browsers?

roberto

  • Hero Member
  • *****
  • Posts: 824
  • Karma: +3/-6
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #2 on: February 03, 2020, 11:40:26 am »
From Spain, without problems.
User agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42.9esr
Saludos

jls_os2user

  • Guest
Re: Strange hobbes.nmsu.edu behavior.
« Reply #3 on: February 03, 2020, 12:22:33 pm »
No access from Russia to hobbes.nmsu.edu.
I've try to send them a email and recieved:

<hobbesarchiver@nmsu.edu>: host mailrelay6.nmsu.edu[128.123.34.142] refused to
    talk to me: 554-mailrelay6.nmsu.edu 554 Your access to this mail system has
    been rejected due to policy.

ivan

  • Hero Member
  • *****
  • Posts: 1603
  • Karma: +20/-0
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #4 on: February 03, 2020, 01:24:14 pm »
hobbes/incoming opens here in France but there is no information as to what the file might be about so most things being uploaded at the moment are a complete mystery as to what they are. 

Wim Brul

  • Sr. Member
  • ****
  • Posts: 300
  • Karma: +26/-0
    • View Profile
    • Wim's home page
Re: Strange hobbes.nmsu.edu behavior.
« Reply #5 on: February 03, 2020, 03:39:50 pm »
Use HobbesIncoming to access all files in there.

Digi

  • Jr. Member
  • **
  • Posts: 69
  • Karma: +4/-1
  • http://os2.snc.ru/
    • View Profile
    • OS/2 ports and applications
Re: Strange hobbes.nmsu.edu behavior.
« Reply #6 on: February 03, 2020, 03:43:26 pm »
Use HobbesIncoming to access all files in there.

hobbes.nmsu.edu does not work from Russia and Ukraine at all.

Laurence Pithie

  • Jr. Member
  • **
  • Posts: 62
  • Karma: +1/-0
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #7 on: February 03, 2020, 04:14:41 pm »

Ian B Manners

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 475
  • Karma: +10/-0
  • I am the computer, it is me.
    • View Profile
    • ComKal Networks Australia
Re: Strange hobbes.nmsu.edu behavior.
« Reply #8 on: February 03, 2020, 04:27:17 pm »
Hi Everyone,

Curtis, the 'maintainer' of hobbes is busy with another project at present, I've thrown some ideas about how to present the text information description files, and access, to him but I can not see anything happening for a 'while' on that front.

I will let him know about the access issues though I suspect they maybe to do with IP ranges being added to the blacklist for uploading scr, php, ISO and other irrelevant files, I've had similar issues with form and DoS attacks from Russia and Ukraine but now most of my banned ranges are China, VietNam and USA so Curtis maybe amicable to relaxing access blacklists when he has time. Hobbes is on a new server, and I know that Curtis has been looking at different ways to secure the server while still giving access to those who use it.

I'll come back to this thread in a couple of weeks time and gather all the information up and let him know.

For those who would rather not go through me, the new Hobbes Archiver email address on the Hobbes server does work (hobbesarchiver at nmsu dot edu) fine for me from Western Australia, so problems could be due to blacklisting or routing issues. I say routing issues because I've been having intermittent packet problems to Europe for the past 3-4 weeks with no access to China.

As pointed out by Wim, you can access the directory directly via https://hobbes.nmsu.edu/download/pub/incoming/
or FTP via ftp://hobbes.nmsu.edu/pub/incoming/  using anonymous, and your email address (fake or real) as the password.
« Last Edit: February 03, 2020, 04:31:44 pm by Ian Manners »
Cheers
Ian B Manners

Dave Yeo

  • Hero Member
  • *****
  • Posts: 5096
  • Karma: +117/-1
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #9 on: February 03, 2020, 05:08:58 pm »
hobbes/incoming opens here in France but there is no information as to what the file might be about so most things being uploaded at the moment are a complete mystery as to what they are.

The txt files show up at ftp://hobbes.nmsu.edu/pub/incoming/, should be a workaround for the SSL errors too.

Valery Sedletski

  • Sr. Member
  • ****
  • Posts: 368
  • Karma: +2/-0
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #10 on: February 03, 2020, 07:31:34 pm »
ftp access fails too: "Network access denied (65)". So, they seem to ban us by IP, neither http, or ftp or
mail works.

PS: Mirrors of course are very outdated. E.g., ftp://crydee.sai.msu.su was last mirrored in 2017.

Accessing ftp root from a VPN with nftp or Netdrive gives an empty directory listing. Can anybody tell Hobbes admins
that discrimination by territorial attribute is not good. Nobody yet bans USA from russian ftp's, like ftp.osfree.org or
ftp.os2.snc.ru,  if we'll begin, would it be good? This will make an additional  fragmentation of community, which is
already very small. Everybody tells about mythical "russian hackers", but I doubt that russian OS/2 users are those,
and even that those mythical hackers are interested in visiting Hobbes. So, ordinary OS/2 users will suffer, as always.
« Last Edit: February 03, 2020, 07:50:54 pm by Valery Sedletski »

Hermit

  • Guest
Re: Strange hobbes.nmsu.edu behavior.
« Reply #11 on: February 03, 2020, 07:39:29 pm »
I confirm that access is closed from the Russian address. We have to select a proxy server.

 ftp://hobbes.nmsu.edu/pub/incoming/
The connection was reset

Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0

Dave Yeo

  • Hero Member
  • *****
  • Posts: 5096
  • Karma: +117/-1
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #12 on: February 03, 2020, 09:46:25 pm »
What about other parts of NMSU https://nmsu.edu/?

Eugene Gorbunoff

  • Full Member
  • ***
  • Posts: 131
  • Karma: +1/-0
    • View Profile
Re: Strange hobbes.nmsu.edu behavior.
« Reply #13 on: February 03, 2020, 10:21:29 pm »
testing from Russia:

* hobbes.nmsu.edu  -  Doesn't work during the last few months.
   host hobbes.nmsu.edu
   hobbes.nmsu.edu =   128.123.88.139


* https://nmsu.edu/ - works fine



Mathias

  • Full Member
  • ***
  • Posts: 196
  • Karma: +2/-0
  • using ArcaOS
    • View Profile
    • IRC
Re: Strange hobbes.nmsu.edu behavior.
« Reply #14 on: February 04, 2020, 08:08:53 am »
Like Ian said... most likely geo block on the specific hobbes external IP.

An admin must really be sick of attacks until he's blocking a whole range or even country ranges. Unfortunately this could potentially mean legit connections also cannot pass through anymore.
But as for protecting the service, this is, as a temporary measure, a valid tool to keep the services up for all of us.
Imagine hobbes being unaccessible for everybody without the geo block would be bad...
And even worse, if it becomes too expensive to protect and maintain hobbes.....
So.. as a quick fix, they propably banned whole ranges to quickly get rid of the attackers.

For the hobbes admins, I'd recommend using adaptive firewall config tools like [  Fail 2 Ban ].
With this they can unblock all the ranges again, and instead configure a set of rules to *automatically*...
- block each individual IP that does forbidden things at every third or second attempt
- unblock them again after n hours

Using such an auto config tool, the firewall maintains itself and only the bad guys need to stay outside. : )