NASASpaceFlight.com Forum

NSF Landing Page (Site Rules, Overviews Development, Feedback) => NASASpaceflight.com and NSF Forum Site Rules/News => Topic started by: Spider1 on 02/04/2021 10:22 am

Title: Any suggestions why my Dad has lost access to these forums?
Post by: Spider1 on 02/04/2021 10:22 am
Hi NASA Spaceflight forum participants!
My dad has been following these forums as long as I can remember (based in Australia) but he is for some reason he cannot open any as it is ‘timing him out’, nor allowing him to access to apply to the L2 forums.
I am entirely new to the forums, just trying to work out this issue on his behalf. Is there an email address for the powers that be here in case he has been kicked out for some reason?
Thank you, hope someone can help.
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Chris Bergin on 02/04/2021 04:15 pm
A few Aussies have said Australian IP Optus blocked access to the forum (as apparently they think all PHP forums are pushing sites (stupid). Tell him to use a different provider or a proxy. That's out of our control, but the two who flagged it say alt provider or proxy solves that.

Tell him to send "NSF is not a phishing site to [email protected]

Also:

If you use an Australian ISP and use their default DNS servers, you will encounter these issues. In Australia, only DNS blocks are enforced.

If you wish to bypass it, you don't need to use a VPN. You can simply change your DNS server to any DNS server you like.

Common ones are:
--
8.8.8.8 / 8.8.4.4 (Google)
1.1.1.1 / 1.0.0.1 (CloudFlare)
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Spider1 on 02/05/2021 09:50 am
Thank you for your help, Chris, on behalf of myself and my dad. Optus are not being helpful, it is definitely the source of the issue.
Thanks again.
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Spider1 on 02/08/2021 06:29 am
Hi Chris,
I received this from my Dad today following contact with Optus, this is their response. Neither of us understand phishing, any ideas? I’m thinking he may just have to change internet providers?
Hopefully this photo loads.
Thanks for trying to help.
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Chris Bergin on 02/09/2021 12:23 am
Sounds like nonsense. The forum is hosted by Digital Ocean. Cloudflare is the DNS. Passed it on to the webmaster :)
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: bstrong on 02/09/2021 01:16 am
Hmm, this actually looks like a legitimate issue:

https://cxsecurity.com/issue/WLB-2019030006

I tried, and it does in fact work on this site, which is a problem for reasons explained here:

https://www.netsparker.com/blog/web-security/open-redirection-vulnerability-information-prevention/

It is not impossible that Optus has found someone exploiting it for phishing attacks.

Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: NSF Webmaster on 02/09/2021 07:21 pm
Hmm, this actually looks like a legitimate issue:

https://cxsecurity.com/issue/WLB-2019030006

I tried, and it does in fact work on this site, which is a problem for reasons explained here:

https://www.netsparker.com/blog/web-security/open-redirection-vulnerability-information-prevention/

It is not impossible that Optus has found someone exploiting it for phishing attacks.



Thanks for pointing this out! A fix was implemented minutes ago and the "exploit" (redirect) doesn't work anymore to sites other than NSF itself.
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: widow18 on 02/10/2021 06:54 pm
I am back on.  Thanks to Bstrong and webmaster.

Peter
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Hog on 02/10/2021 07:23 pm
I am back on.  Thanks to Bstrong and webmaster.

Peter
Welcome (back) to NASA Spaceflight.com!
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Spider1 on 02/10/2021 08:22 pm
So I can stand down?
Thank you everyone involved.
Title: Re: Any suggestions why my Dad has lost access to these forums?
Post by: Chris Bergin on 02/10/2021 08:37 pm
So I can stand down?
Thank you everyone involved.


Yep! Thanks for the information and check your messages (PMs - the thing at the top of the forum) as we've got a thank you for your Dad when he gets back in one way or the other.