US servers blocked to lowes, tractorsupply, many US servers blocked to backyardchickens

[caldwell444 1]

I went through the "Check This Guide First" thread.  I was able to use the routing page to determine that all US AirVPN nodes are blocked for https://www.lowes.com and https://www.tractorsupply.com.  Roughly 40% of the nodes also block another site- https://www.backyardchickens.com that I also want to visit.

I used the "United States" option to generate a config for my DD-WRT router.  When I run into a block, I generally restart my router to link to a different AirVPN server, but right now, I keep cycling to Virgo, Teegarden and Groombridge.  All of them are blocked for the three sites above.

Edit: I'm also getting blocked from all US servers to https://www.kroger.com/

Not sure if this is helpful, but I get the following message in Firefox for backyardchickens:

Error 1005

Ray ID: 71a30adba9867bb3 • 2022-06-12 13:48:08 UTC

Access denied

What happened?

The owner of this website (www.backyardchickens.com) has banned the autonomous system number (ASN) your IP address is in (9009) from accessing this website.

Was this page helpful?

 

Cloudflare Ray ID: 71a30adba9867bb3 • Your IP: 193.37.254.11 • Performance & security by Cloudflare

Edited ... by He who shall not be named
Added Kroger

[coenzyme 0]

56 minutes ago, He who shall not be named said:

I was able to use the routing page to determine that all US AirVPN nodes are blocked for https://www.lowes.com and https://www.tractorsupply.com.  Roughly 40% of the nodes also block another site- https://www.backyardchickens.com that I also want to visit.

I can connect with Sham (Canada) in my environment (EdgeRouter).

www.lowes.com --> www.lowes.com/selectsiteoption (Redirect destination)
www.tractorsupply.com
www.backyardchickens.com
 

[go558a83nk 383]

if you use the checking route tool all seems well to lowes.  I didn't try the others.  https://airvpn.org/routes/?q=www.lowes.com
 

[caldwell444 1]

On 6/13/2022 at 9:01 AM, go558a83nk said:

if you use the checking route tool all seems well to lowes.  I didn't try the others.  https://airvpn.org/routes/?q=www.lowes.com
 

I just tried your link and got 100% failure rate.  I'm wondering if they release blocks after a certain period of time.  If anyone sees this post soon, can you try the same link above and see if lowes is blocked or accessible?  Thanks.

PS- I also got 100% error rate for https://airvpn.org/routes/?q=www.backyardchickens.com  Do you get the same? Edited ... by He who shall not be named
added backyardchickens

[go558a83nk 383]

1 hour ago, He who shall not be named said:

I just tried your link and got 100% failure rate.  I'm wondering if they release blocks after a certain period of time.  If anyone sees this post soon, can you try the same link above and see if lowes is blocked or accessible?  Thanks.

PS- I also got 100% error rate for https://airvpn.org/routes/?q=www.backyardchickens.com  Do you get the same?

For me the 3 websites load no problem and I note that almost every server gets a ping response in the route checker.

Could it be that the DNS ad blocker is blocking them?

[caldwell444 1]

The ping response means that the server is responding to a ping, not a HTTP request.  However, I'm getting reds across the board on HTTP responses- generally HTTP 301 and HTTP 403. 
I do have a number of security features in place beyond the VPN and I'm open to the possibility that something that I have is triggering the blocks.

On retail sites that seem to be most sensitive to browser security (lowes, tractorsupply, kroger), I run Firefox with no add-ons.  For most browsing and for backyardchickens, I run Firefox with uBlockOrigin, EFF Privacy Badger, Canvas Blocker and NoScript.
I have tried Chromium and Brave browsers with no better results.
I do run DD-WRT on my router and the main security addition is the AirVPN connection.

[go558a83nk 383]

6 minutes ago, He who shall not be named said:

The ping response means that the server is responding to a ping, not a HTTP request.  However, I'm getting reds across the board on HTTP responses- generally HTTP 301 and HTTP 403. 
 

Yes, the http column is all red but yet the sites load up for me on Mensa.   That's why I'm saying there's something else going on and suggesting maybe the DNS ad blocker that AirVPN runs.

[caldwell444 1]

12 minutes ago, go558a83nk said:

Yes, the http column is all red but yet the sites load up for me on Mensa.   That's why I'm saying there's something else going on and suggesting maybe the DNS ad blocker that AirVPN runs.

Wow.  I switched the primary DNS server on my router from 10.4.0.1 (AirVPN) to an OpenDNS address and was able to access all of the web sites right away.  Thanks @go558a83nk.

I'd prefer to use the AirVPN DNS for better privacy, but will have to go with this config for now.

[go558a83nk 383]

3 minutes ago, He who shall not be named said:

Wow.  I switched the primary DNS server on my router from 10.4.0.1 (AirVPN) to an OpenDNS address and was able to access all of the web sites right away.  Thanks @go558a83nk.

I'd prefer to use the AirVPN DNS for better privacy, but will have to go with this config for now.

 you should be able to whitelist what you want or edit what blocklists are being used for your device(s).  and perhaps these sites are just a false positive anyway and Air staff should remove them from blocklists?

[caldwell444 1]

I'm going to submit a support ticket and let them know what I've run into.  Thanks again.

[go558a83nk 383]

the OISD Full blocklist contains metrics.lowes.com and smetrics.lowes.com.  I wonder if blocking those is preventing the whole site from loading?

[volkhart 3]

On a similar note, I am getting the following error for some days now when trying to access one of the wipo.int databases:

Yes, I have tried other browsers, including Chrome, Edge (shudder) and TOR. I have also tried  the route checking tool to no avail. And no, there are no DNS leaks. Unencrypted access, i.e. Eddie turned off, works fine.
There is no problem accessing wipo.int itself, just the databases.
I use Opera 88.0.4412.74 on Windows 11.
This is a bummer. Any pointers would be greatly appreciated.

[SurprisedItWorks 54]

On 6/14/2022 at 8:17 PM, He who shall not be named said:

I'd prefer to use the AirVPN DNS for better privacy, but will have to go with this config for now.

Bit of an aside here, but if you are running a recent dd-wrt build on a relatively capable router (since lesser routers don't get all dd-wrt features), you should be able to select Encrypt DNS (uses DNSCrypt) in the DNSmasq section of the dd-wrt Services tab, choose Quad9 (see quad9.net) from the provider drop-down, and add no-resolv to the Additional dnsmasq options (to prevent DNS leaks) to get a relatively private and malware-screened DNS setup to hold you until you get the Air DNS business sorted.