+- 6.5 Grendel Forum (https://65grendel.com)
+-- Forum: 6.5 GRENDEL FORUM NEWS (https://65grendel.com/forumdisplay.php?fid=5)
+--- Forum: Announcements (https://65grendel.com/forumdisplay.php?fid=24)
+--- Thread: Whats happened? (/showthread.php?tid=26228)
Whats happened? - cwlongshot - 02-28-2024
I view on iPhone.
The site has been basic not normal for most of a month mow. I have re started logged out and in and it remains same.
CW
Whats happened? - Konocti's Wigwam - 02-29-2024
cwlongshot Wrote:I view on iPhone.Let's see if it let's me reply. It seems hit/miss, but does work sometimes.
The site has been basic not normal for most of a month mow. I have re started logged out and in and it remains same.
CW
The best I can tell, something was changed in the configuration to do with either SSL or running the site over SSL. Normal HTTP uses port 80 to communicate with. I don't feel like explaining it so hopefully you know that. HTTPS uses SSL and many websites redirect all of their traffic over port 993 which is setup to use SSL. What exactly changed, I don't know. I sent an email to Joe Smith as I thought he might know what happened. Him and PaulS both seem active, but JoeS mention JohnH.
I offered to talk with JohnH if he wanted, but I haven't heard back from Joe yet.
They are running on Apache, but I show their IP as being listed in one blacklist: https://dnschecker.org/ip-blacklist-checker.php?query=162.241.24.146
I don't know too much about the configuration to be honest, this is just using network tools.
This is what nmap shows: (I misspoke about port 993, that's for imap, https is 443)
[aland@oak ~]$ nmap 65grendel.com
Starting Nmap 7.80 ( https://nmap.org ) at 2024-02-28 16:36 PST
Nmap scan report for 65grendel.com (162.241.24.146)
Host is up (0.068s latency).
rDNS record for 162.241.24.146: box5878.bluehost.com
Not shown: 983 closed ports
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
26/tcp open rsftp
53/tcp open domain
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
2222/tcp open EtherNetIP-1
3306/tcp open mysql
5432/tcp open postgresql
5925/tcp filtered unknown
Nmap done: 1 IP address (1 host up) scanned in 27.34 seconds
Whats happened? - Konocti's Wigwam - 02-29-2024
cwlongshot Wrote:I view on iPhone.
The site has been basic not normal for most of a month mow. I have re started logged out and in and it remains same.
CW
I think I see something interesting. In the one RBL blacklist when you click on Details it shows https://matrix.spfbl.net/162.241.24.146
If you try to open that url, it shows no reverse DNS.
Joe, Paul, John, did someone change the DNS settings recently?
Alan
Whats happened? - Konocti's Wigwam - 02-29-2024
Konocti's Wigwam Wrote:If you try to open that url, it shows no reverse DNS.
I can't edit, so replying to this. The reverse DNS is showsing the hosting ISP, which is bluehost.com
That could be why Apache is fubar, but not entirely sure. I think we'll need to wait for JohnH to dig deeper.
Whats happened? - 37L1 - 02-29-2024
Mine has been fubar too. Makes me not want to look here any more.
Whats happened? - Konocti's Wigwam - 02-29-2024
37L1 Wrote:Mine has been fubar too. Makes me not want to look here any more.
I agree.