[Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Ian Lance Taylor]

[-- Attachment #1: Type: text/plain, Size: 26 bytes --]

Forwarding to overseers.


[-- Attachment #2: Type: message/rfc822, Size: 6731 bytes --]

From: "Therese Godefroy via RT" <webmasters-comment@gnu.org>
Cc: gccheads@lists.schmorp.de
Subject: [gnu.org #2150507] https://gcc.gnu.org returns error 403
Date: Tue, 11 Feb 2025 05:54:39 -0500
Message-ID: <rt-4.2.16-14-g9a593ee-23952-1739271279-512.2150507-8-0@rt.gnu.org>

Hello GCC maintainers,

A user reported that he can't reach the GCC website from his desktop
computer, but can reach it from his telephone. (See the conversation
below.) As this site is hosted by RedHat, the FSF can't do anything
about it. Is there anything you can do on your side? Thanks in advance.

Best regards,
Thérèse


Le Lun 10 Fév 2025 18:16:25, jose@lombera.dev a écrit :
> On 2025-02-10 15:19 UTC, Therese Godefroy via RT wrote:
> 
> > Le Lun 10 Fév 2025 05:18:04, jose@lombera.dev a écrit :
> >> On 2025-02-05 05:51 UTC, Therese Godefroy via RT wrote:
> >> > Le Mer 05 Fév 2025 00:50:04, jose@lombera.dev a écrit :
> >> >> Hi,
> >> >> 
> >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
> >> >> following message:
> >> >> 
> >> >> "You don't have permission to access this resource.
> >> >> 
> >> >> Additionally, a 403 Forbidden error was encountered while trying to
> >> >> use an ErrorDocument to handle the request."
> >> >> 
> >> >> Any page under that subdomain returns error 403.
> >> >> 
> >> >> Regards,
> >> >> Jose Lombera
> >> >
> >> > Hello Jose,
> >> >
> >> > Thanks for reaching out.
> >> > This has been fixed: https://gcc.gnu.org/ is now accessible.
> >> >
> >> > Best regards,
> >> > Thérèse
> >> 
> >> Hi,
> >> 
> >> https://gcc.gnu.org is returning error 403 again.
> >> 
> >> Regards,
> >> Jose
> >> 
> >
> > Hello Jose,
> >
> > I just checked (from France), and didn't get this error.
> > Sysadmins sometimes need to block some machines because
> > they are under attack [1]. Could it be that your IP was
> > blocked? How is it now?
> >
> > Let's hope it gets better,
> > Thérèse
> >
> > [1] https://hostux.social/@fsfstatus
> 
> Thanks for following up on this.
> 
> As of now (2025-02-10_22:48:13 UTC) I'm still getting error 403.
> 
> It seems it's indeed a problem with my ISP's router public IP, since I 
> don't have any problem accessing it from my cellphone using the mobile 
> network.  I don't know why my IP would be blocked, it's just a normal 
> residential IP, also I don't have problem accessing https://www.gnu.org, 
> it's just the gcc.gnu.org subdomain where the problem occurs.  
> 
> If it is of any help, these are the IPs those domains are resolved from 
> my machine:
> 
> $ host www.gnu.org
> www.gnu.org has address 209.51.188.116
> 
> $ host gcc.gnu.org
> gcc.gnu.org has address 8.43.85.97
> 

Re: [Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Mark Wielaard]

Hi,

On Tue, Feb 11, 2025 at 09:36:13PM -0800, Ian Lance Taylor via Overseers wrote:
> Forwarding to overseers.

There are indeed various blocks in place because of ddos attacks on
sourceware and gcc.gnu.org. These are mainly chinese and brazillian
ipv4 blocks.  Please let us know which address appears to be blocked
and we'll try to narrow the range.

Thanks,

Mark

> Date: Tue, 11 Feb 2025 05:54:39 -0500
> From: Therese Godefroy via RT <webmasters-comment@gnu.org>
> CC: gccheads@lists.schmorp.de
> Subject: [gnu.org #2150507] https://gcc.gnu.org returns error 403
> Message-ID: <rt-4.2.16-14-g9a593ee-23952-1739271279-512.2150507-8-0@rt.gnu.org>
> Reply-To: webmasters-comment@gnu.org
> 
> Hello GCC maintainers,
> 
> A user reported that he can't reach the GCC website from his desktop
> computer, but can reach it from his telephone. (See the conversation
> below.) As this site is hosted by RedHat, the FSF can't do anything
> about it. Is there anything you can do on your side? Thanks in advance.
> 
> Best regards,
> Thérèse
> 
> 
> Le Lun 10 Fév 2025 18:16:25, jose@lombera.dev a écrit :
> > On 2025-02-10 15:19 UTC, Therese Godefroy via RT wrote:
> > 
> > > Le Lun 10 Fév 2025 05:18:04, jose@lombera.dev a écrit :
> > >> On 2025-02-05 05:51 UTC, Therese Godefroy via RT wrote:
> > >> > Le Mer 05 Fév 2025 00:50:04, jose@lombera.dev a écrit :
> > >> >> Hi,
> > >> >> 
> > >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
> > >> >> following message:
> > >> >> 
> > >> >> "You don't have permission to access this resource.
> > >> >> 
> > >> >> Additionally, a 403 Forbidden error was encountered while trying to
> > >> >> use an ErrorDocument to handle the request."
> > >> >> 
> > >> >> Any page under that subdomain returns error 403.
> > >> >> 
> > >> >> Regards,
> > >> >> Jose Lombera
> > >> >
> > >> > Hello Jose,
> > >> >
> > >> > Thanks for reaching out.
> > >> > This has been fixed: https://gcc.gnu.org/ is now accessible.
> > >> >
> > >> > Best regards,
> > >> > Thérèse
> > >> 
> > >> Hi,
> > >> 
> > >> https://gcc.gnu.org is returning error 403 again.
> > >> 
> > >> Regards,
> > >> Jose
> > >> 
> > >
> > > Hello Jose,
> > >
> > > I just checked (from France), and didn't get this error.
> > > Sysadmins sometimes need to block some machines because
> > > they are under attack [1]. Could it be that your IP was
> > > blocked? How is it now?
> > >
> > > Let's hope it gets better,
> > > Thérèse
> > >
> > > [1] https://hostux.social/@fsfstatus
> > 
> > Thanks for following up on this.
> > 
> > As of now (2025-02-10_22:48:13 UTC) I'm still getting error 403.
> > 
> > It seems it's indeed a problem with my ISP's router public IP, since I 
> > don't have any problem accessing it from my cellphone using the mobile 
> > network.  I don't know why my IP would be blocked, it's just a normal 
> > residential IP, also I don't have problem accessing https://www.gnu.org, 
> > it's just the gcc.gnu.org subdomain where the problem occurs.  
> > 
> > If it is of any help, these are the IPs those domains are resolved from 
> > my machine:
> > 
> > $ host www.gnu.org
> > www.gnu.org has address 209.51.188.116
> > 
> > $ host gcc.gnu.org
> > gcc.gnu.org has address 8.43.85.97
> > 
> 
> 
> 
> 
> 

Re: [Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Frank Ch. Eigler]

Hi -

> > >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
> > >> >> following message:
> > >> >> "You don't have permission to access this resource.
> > >> >>  [...]

The sourceware.ort/gcc.gnu.org server has a mixture of automatic and
manual firewalling measures to protect itself against perceived abuse.
Please share your IP address (and gcc.gnu.org user name if you have one)
so we can investigate.

- FChE

Re: [Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Jose Lombera]

On 2025-02-12 07:34 UTC, Frank Ch. Eigler wrote:
> Hi -
>
>> > >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
>> > >> >> following message:
>> > >> >> "You don't have permission to access this resource.
>> > >> >>  [...]
>
> The sourceware.ort/gcc.gnu.org server has a mixture of automatic and
> manual firewalling measures to protect itself against perceived abuse.
> Please share your IP address (and gcc.gnu.org user name if you have one)
> so we can investigate.
>
> - FChE

Hi Frank,

Sorry for the late reply.  My current public IP is (according to 
whatismyipaddress.com):  177.249.169.239

Thanks in advance,
Jose Lombera

Re: [Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Mark Wielaard]

Hi Jose,

On Fri, Feb 14, 2025 at 09:17:16PM +0000, Jose Lombera via Overseers wrote:
> On 2025-02-12 07:34 UTC, Frank Ch. Eigler wrote:
> >>> >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
> >>> >> >> following message:
> >>> >> >> "You don't have permission to access this resource.
> >>> >> >>  [...]
> >
> >The sourceware.ort/gcc.gnu.org server has a mixture of automatic and
> >manual firewalling measures to protect itself against perceived abuse.
> >Please share your IP address (and gcc.gnu.org user name if you have one)
> >so we can investigate.
> 
> Sorry for the late reply.  My current public IP is (according to
> whatismyipaddress.com):  177.249.169.239

We were blocking all of 177.128.0.0/9 which was too wide.
I reduced it to the 177.128.0.0/10 and 177.192.0.0/11 blocks.
That should give you access again.

Apologies for the wide blocks. We are fighting some botnets like
described in this article: Fighting the AI scraperbot scourg
https://lwn.net/SubscriberLink/1008897/ed59a26ca24b28dc/

Cheers,

Mark

Re: [Therese Godefroy via RT] [gnu.org #2150507] https://gcc.gnu.org returns error 403

[Jose Lombera]

Hi Mark,

On 2025-02-15 00:03 UTC, Mark Wielaard wrote:
> Hi Jose,
>
> On Fri, Feb 14, 2025 at 09:17:16PM +0000, Jose Lombera via Overseers wrote:
>> On 2025-02-12 07:34 UTC, Frank Ch. Eigler wrote:
>> >>> >> >> FYI, https://gcc.gnu.org/ is returning error 403 (Forbidden) with
>> >>> >> >> following message:
>> >>> >> >> "You don't have permission to access this resource.
>> >>> >> >>  [...]
>> >
>> >The sourceware.ort/gcc.gnu.org server has a mixture of automatic and
>> >manual firewalling measures to protect itself against perceived abuse.
>> >Please share your IP address (and gcc.gnu.org user name if you have one)
>> >so we can investigate.
>> 
>> Sorry for the late reply.  My current public IP is (according to
>> whatismyipaddress.com):  177.249.169.239
>
> We were blocking all of 177.128.0.0/9 which was too wide.
> I reduced it to the 177.128.0.0/10 and 177.192.0.0/11 blocks.
> That should give you access again.
>
> Apologies for the wide blocks. We are fighting some botnets like
> described in this article: Fighting the AI scraperbot scourg
> https://lwn.net/SubscriberLink/1008897/ed59a26ca24b28dc/
>
> Cheers,
>
> Mark

I can confirm I have access again.  Thanks a lot for following this up 
so quickly!

Best regards,
Jose