Fyi- Implementing a new bot protection framework tomorrow

[Sean]

Hi All,

Tomorrow (12hrs from now) we'll be flipping the switch to some Cloudflare services. This will be in addition to some of our other bot mitigation systems. The configurations are tailored to leave the membership alone, but challenge any nefarious looking bot activities. There will also be some basic global caching which should make things even more snappy.

I'll post another update once the change has been made and we'll keep an eye out for any issues.

Thanks!
Sean

 

[Sean]

The changes are in. So far so good

 

[Sean]

Slight DNS propagation delay but we should be 100% now. We're already blocking 1,000s of nefarious bots, which is wild to see. I think the system will be great for us.

 

[ghart]

Based in the UK, I use Proton VPN and Cloudfare prevented me from accessing this site.

 

[sean-mobile]

Based in the UK, I use Proton VPN and Cloudfare prevented me from accessing this site.

Good to know, did it challenge you and then let you in or 100% block? I can investigate and get back to you soon. Thanks

 

[RalphLambrecht]

The changes are in. So far so good

keep up the good work. Glad to be part of it.

 

[Sean]

Based in the UK, I use Proton VPN and Cloudfare prevented me from accessing this site.

I've tested using my own proton vpn and it seems fine. It might have been a temporary glitch as we had just 'flipped the switch' which would have added some instability at the time.

If it is still an issue:

• What exact error page appeared?
  • Cloudflare branded page?
  • Browser "403 Forbidden"?
  • Connection timed out?
  • Site-specific block message?
• What happens if you:
  • Disconnect ProtonVPN?
  • Reload the site?

 

[ghart]

I've tested using my own proton vpn and it seems fine. It might have been a temporary glitch as we had just 'flipped the switch' which would have added some instability at the time.

If it is still an issue:

• What exact error page appeared?
  • Cloudflare branded page?
  • Browser "403 Forbidden"?
  • Connection timed out?
  • Site-specific block message?
• What happens if you:
  • Disconnect ProtonVPN?
  • Reload the site?

Yes, Cloudfare branded, little square box, ticked, then repeated ad infinitum. Connecting the VPN via the US or NZ is just fine. Odd

 

[Sean]

Yes, Cloudfare branded, little square box, ticked, then repeated ad infinitum. Connecting the VPN via the US or NZ is just fine. Odd

Strange, I tried a UK vpn from the list, are you able to point me to the specific vpn server that failed? Thanks!

 

[ghart]

UK#232

 

[Sean]

UK#232

Thanks, that particular node gave me a cloudflare challenge, I clicked through and was let in. After that I had no more challenges. This indicates your browser (most likely) or proton settings are very aggressive and blocking cookies and trackers = you keep getting prompted. Are you able to whitelist Photrio in your browser settings (or adblock/tracker settings)? I can supply details if you tell me the browser.

 

[ghart]

Safari, but tinkering around with the settings doesn't make any difference

 

[Sean]

Safari, but tinkering around with the settings doesn't make any difference

Hmm, if you go to Photrio, then "Settings for photrio.com"

There might be something there blocking, I set mine to leave photrio content alone:

Do you have any 3rd party virus scanners or browser ad block addons? One of those can cause issues too.

 

[ghart]

Hmm, if you go to Photrio, then "Settings for photrio.com"

View attachment 427320

There might be something there blocking, I set mine to leave photrio content alone:

View attachment 427321

Do you have any 3rd party virus scanners or browser ad block addons? One of those can cause issues too

Nothing was blocked in Safari, and I have no other blockers or scanners in use. However I normally load this site on the "New posts" tab, so I tried loading at the forum level and I was allowed to go ahead! So Cloudfare seems to be blocking access to the site at a deeper level, but only if I use the VPN via the UK.