Page 1 of 1

Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:00 pm
by SideTips
Here goes my linux box information...

Code: Select all

System:    Host: <filter> Kernel: 5.10.0-9-686-pae i686 bits: 32 compiler: N/A 
           parameters: BOOT_IMAGE=/boot/vmlinuz-5.10.0-9-686-pae 
           root=UUID=<filter> ro quiet splash 
           Desktop: Xfce 4.16.0 tk: Gtk 3.24.24 info: xfce4-panel wm: xfwm4 dm: LightDM 1.26.0 
           Distro: MX-21_386 Wildflower October 20  2021 base: Debian GNU/Linux 11 (bullseye) 
Machine:   Type: Laptop System: Hewlett-Packard product: HP Compaq tc4400 (RA296AW#ABE) v: F.0C 
           serial: <filter> Chassis: type: 10 serial: <filter> 
           Mobo: Hewlett-Packard model: 30B1 v: KBC Version 59.35 serial: <filter> 
           BIOS: Hewlett-Packard v: 68YHV Ver. F.0C date: 07/09/2008 
Battery:   ID-1: C1B4 charge: 1.2 Wh condition: 1.2/1.2 Wh (100%) volts: 12.4/11.1 
           model: Hewlett-Packard Primary type: Li-ion serial: <filter> status: Full 
CPU:       Topology: Dual Core model: Intel T2500 bits: 32 type: MCP arch: M Yonah family: 6 
           model-id: E (14) stepping: 8 microcode: 39 L2 cache: 2048 KiB 
           flags: nx pae sse sse2 sse3 vmx bogomips: 7979 
           Speed: 1030 MHz min/max: 1000/2000 MHz Core speeds (MHz): 1: 1822 2: 1633 
           Vulnerabilities: Type: itlb_multihit status: KVM: VMX disabled 
           Type: l1tf status: Vulnerable 
           Type: mds status: Vulnerable: Clear CPU buffers attempted, no microcode; SMT disabled 
           Type: meltdown mitigation: PTI 
           Type: spec_store_bypass status: Not affected 
           Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization 
           Type: spectre_v2 mitigation: Full generic retpoline, STIBP: disabled, RSB filling 
           Type: srbds status: Not affected 
           Type: tsx_async_abort status: Not affected 
Graphics:  Device-1: Intel Mobile 945GM/GMS 943/940GML Express Integrated Graphics 
           vendor: Hewlett-Packard driver: i915 v: kernel bus ID: 00:02.0 chip ID: 8086:27a2 
           Display: x11 server: X.Org 1.20.11 driver: intel unloaded: fbdev,modesetting,vesa 
           resolution: 1024x768~60Hz, 1024x768~60Hz 
           OpenGL: renderer: Mesa DRI Intel 945GM x86/MMX/SSE2 v: 1.4 Mesa 20.3.5 
           direct render: Yes 
Audio:     Device-1: Intel NM10/ICH7 Family High Definition Audio vendor: Hewlett-Packard 
           driver: snd_hda_intel v: kernel bus ID: 00:1b.0 chip ID: 8086:27d8 
           Sound Server: ALSA v: k5.10.0-9-686-pae 
Network:   Device-1: Broadcom and subsidiaries NetXtreme BCM5753M Gigabit Ethernet PCI Express 
           vendor: Hewlett-Packard driver: tg3 v: kernel port: 40d0 bus ID: 08:00.0 
           chip ID: 14e4:16fd 
           IF: eth0 state: down mac: <filter> 
           Device-2: Intel PRO/Wireless 3945ABG [Golan] Network vendor: Hewlett-Packard 
           driver: iwl3945 v: in-tree:s port: 40d0 bus ID: 10:00.0 chip ID: 8086:4222 
           IF: wlan0 state: up mac: <filter> 
Drives:    Local Storage: total: 119.24 GiB used: 73.48 GiB (61.6%) 
           ID-1: /dev/sda vendor: A-Data model: SU800 size: 119.24 GiB block size: 
           physical: 4096 B logical: 512 B speed: 1.5 Gb/s serial: <filter> rev: 1C scheme: MBR 
Partition: ID-1: / raw size: 11.24 GiB size: 10.98 GiB (97.63%) used: 8.35 GiB (76.1%) fs: ext3 
           dev: /dev/sda3 
           ID-2: swap-1 size: 1.00 GiB used: 0 KiB (0.0%) fs: swap swappiness: 15 (default 60) 
           cache pressure: 100 (default) dev: /dev/sda4 
Sensors:   System Temperatures: cpu: 51.0 C mobo: N/A 
           Fan Speeds (RPM): N/A 
Repos:     No active apt repos in: /etc/apt/sources.list 
           Active apt repos in: /etc/apt/sources.list.d/debian-stable-updates.list 
           1: deb http://deb.debian.org/debian bullseye-updates main contrib non-free
           Active apt repos in: /etc/apt/sources.list.d/debian.list 
           1: deb http://deb.debian.org/debian bullseye main contrib non-free
           2: deb http://security.debian.org/debian-security bullseye-security main contrib non-free
           Active apt repos in: /etc/apt/sources.list.d/mx.list 
           1: deb http://mxlinux.mirrors.uk2.net/packages/mx/repo/ bullseye main non-free
Info:      Processes: 212 Uptime: 12m Memory: 2.95 GiB used: 1023.0 MiB (33.9%) Init: SysVinit 
           v: 2.96 runlevel: 5 default: 5 Compilers: gcc: 10.2.1 alt: 10 Shell: quick-system-in 
           running in: quick-system-in inxi: 3.0.36 
I'm unable to access a site that is blocked by my ISP provider. I changed my DNS servers IPs, by changing the primary and secondary DNS server IPs (those can be altered in the "Edit the connections" from the WiFi icon under the "IPv4 Settings" tab). I can confirm that the DNS did change because I can see the results in www.dnsleaktest.com. But still no access.

On the other hand, my system is dual boot and I have windows 7 in the other partition. Guess what. I changed the DNS servers (altering the IPv4 properties) and with that I can access the site that is still blocked from mx linux.

So, what do I have to do in MX Linux to gain access to the blocked site?

Thank you!

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:02 pm
by Eadwine Rose
That depends on the blocked site.

We are not going to help you gain access to sites that contain materials such as software and music and such that can illegally be downloaded. Please provide more info.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:11 pm
by Charlie Brown
Also check:

Code: Select all

cat /etc/resolv.conf
You can also change it to "... "Addresses Only" " in that tab (click the dropdown).

Also check your /etc/hosts file , whether the site is in the list.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:27 pm
by SideTips
Thank you for your prompt replies!

Let me say:

To "Eadwine Rose" accessing sites (blocked or not) is not illegal. I already have had the access to the blocked site using Windows7. My question was (and still is) why I can not do the same thing via mx linux?

To "Charlie Brown". Before I decided to post the questions. I did exactly what you have described in your reply. And everything looks fine from that perspective. In the "Connection Information" I can see the effective change in DNS servers IPs and also visiting the site "www.dnsleaktest.com" as well. The blocked site is not present in the list at /etc/host

So my friends. What is wrong?

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:39 pm
by Eadwine Rose
Accessing sites is not illegal, us helping people circumvent blocks that were put there for a reason might be. It's not you I am being careful with here.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:47 pm
by SideTips
Fair enough "Eadwine Rose". When you say there are "blocks that were put THERE for a reason". The word "THERE" means in my linux box?

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)  [Solved]

Posted: Sat Feb 17, 2024 5:51 pm
by Charlie Brown
I'd try on live session (with an official iso, not a personal snapshot).

Also you can set those dns in router settings, too (I did so) , they'll be valid for all systems connected to that device unless the system is set to something else.

i.e.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 5:51 pm
by CharlesV
What site exactly is being blocked?

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 6:12 pm
by SideTips
To "CharlesV" (thank you for your reply). I think I should not tell you because it is blocked by my ISP by legal orders (that might be local to my country, I do not know). I think you would probably have access to it from your country.

To "Charlie Brown" (thank you). Again, what you explain in your post is correct.

My point here (to both of you) is: I can access that blocked site from Win7 (changing DNS servers) and I can not do the same thing in Linux. Why?

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 6:21 pm
by SideTips
I forgot to say that I will give a try to the live session to check how it goes...

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 6:22 pm
by CharlesV
There are two points to accessing a site:

1) dns - can you ping using the site's name and does the name resolve to an ip?
and
2) actual access.

TO my knowledge, unless you have specifically added some type of watch / blocker to your linux load, there should be nothing blocking you. You MAY not have changed dns servers in the system, or it may still be using the original cached DNS servers.

Try rebooting after the DNS changes.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 6:22 pm
by richb
Seems to me you should be asking your ISP.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 7:01 pm
by SideTips
To "CharlesV", I have just booted a live session of mx21 in the same computer. Changed the dns servers (disconnected and the re-connected WiFi) and get the exact same result. So my linux "load" is fine. And I also decided to try the access on Windows10 changing DNS and voila! It works!

To richb (thank you). Yeap I think I should ask my ISP, Hehehehe.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 7:03 pm
by SideTips
So I can access the blocked site from Win7 and Win10 but not with mx linux 21. I'm going to check what happens with a live session from mx 19.3 and I will let you know...

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 7:05 pm
by DukeComposed
SideTips wrote: Sat Feb 17, 2024 6:12 pm My point here (to both of you) is: I can access that blocked site from Win7 (changing DNS servers) and I can not do the same thing in Linux. Why?
Julia Evans was on a podcast in 2018 that explains this in detail. She wrote about it on her blog and provided a link to the episode that includes a complete transcript. I think she does a pretty decent job breaking down the steps involved in answering your question.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 7:14 pm
by SideTips
To "DukeComposed", thank you for your suggestion, I will have a look at that link for sure.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sat Feb 17, 2024 8:12 pm
by SideTips
Well I want to thank all of you for your help as it was very useful for me.

I also want to say thanks in particular to "Charlie Brown". Mainly for the idea of the live session and as said before. I tried a live session of mx21 and it does not work.

Now guess what. I also gave it try with a live session of mx19.3 and voila! It works! And I followed the exact same steps with both mx21 and mx19.3 (live sessions) as I had explained all the way down this post. Why this happens, I will leave it to your consideration...

My adventure (for this matter) ends here.

Thank you!

P.S. I will give the SOLVED to "Charlie Brown"

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sun Feb 18, 2024 10:45 am
by Charlie Brown
Glad to hear it works on any MX :)

Just loudly thinking:

If it was just MX-23, the difference is that ufw is enabled by default. (Was not up to 23)

But the common point of 21 and 23 is that resolvconf (package) is not installed ootb (on MX-19 and before, that package manages those things ootb).


In fact that was the 1st thing that came to my mind but didn't write as you already verified the dns , also the contents of resolv.conf file ... there must still be something about that ...

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sun Feb 18, 2024 6:51 pm
by SideTips
Thank very much for your time "Charlie Brown".

Let me make one thing clear (that I think you got wrong).

I'm NOT able to access the blocked site using MX Linux v21. But I am ABLE to access the blocked site using MX linux v19.3 without problems. Please note that I followed the same steps in both versions regarding the configuration of DNS and so on.

So, something is wrong with MX21. My question is why does this happen? I think MX21 just ignores the GUI that is used to configure WiFi settings and does something else instead.

I have no need to access the blocked site. I just use it as a test. And I can skip the block created by my ISP using: windows 7, windows 10 and also MX19.3 but not MX21 (I have not tested the live session from v23. I do not know if I ever will.)

Do you have any ideias why this happens in MX21?

I wrote this post to satisfy my curiosity and to confirm that MX21 may have some kind of bug regarding the configurations of DNS servers by the user to override the ones established by the ISP.

Take care "CB"

P.S. I do not use ufw in linux

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sun Feb 18, 2024 8:17 pm
by FullScale4Me
This sounds more like the browser headers returned to the webserver are being evaluated against a local block list.

With a few 10s of years of website building experience, this does NOT sound like any ISP interference. Banking sites do this all the time. They are usually more polite about it and ask you to use a different browser and/or OS. Not an MX 21 issue IMHO.

A possible good test would be to install the same version of web browser as used on MX 19 on MX 21.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Sun Feb 18, 2024 10:45 pm
by DukeComposed
FullScale4Me wrote: Sun Feb 18, 2024 8:17 pm This sounds more like the browser headers returned to the webserver are being evaluated against a local block list.

With a few 10s of years of website building experience, this does NOT sound like any ISP interference. Banking sites do this all the time. They are usually more polite about it and ask you to use a different browser and/or OS. Not an MX 21 issue IMHO.

A possible good test would be to install the same version of web browser as used on MX 19 on MX 21.
There are a lot of possible tests to troubleshoot this. My concern is that we're now two pages into a solved thread with no diagnostic information beyond a QSI. The site can be "accessed". Does that mean it loads in a browser? What does it mean when that site cannot be "accessed"? Are there error messages? What do they say? What does a traceroute look like? What are the responses from the DNS resolvers? Is there a transparent bridging situation at play here? Have you configured any kind of HTTP or SOCKS proxy? The list goes on.

There are an incredible number of changes between Debian releases, and many more MX changes on top of those. "Why does one system work and the other doesn't?" is not a fair question to ask if you can't or won't provide details that explain the situation. Without concrete definitions of what "works" and "doesn't work", we're left with speculation.

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Mon Feb 19, 2024 6:30 am
by SideTips
Thanks to both you in the last 2 comments.

At this moment I'm far away from my laptop. Later I can try to give you more details.

When I say I cannot access the blocked site I mean thar I get redirected to a page that says something like... The authority bla bla bla has determined that visits or whatever you a this site is in violation of copyrights"

When I say that I have access to (the site that is) blocked. I mean this site fully loads into the browser and I can click on any link a visit.

Forgive my incorrect language because I am at the very bottom of the IT chain... Something like just a curious user...

The reason I marked this thing as solve is because I reinstalled Mx19.3 into my laptop and when I change the dns ips it works For me. It is fine

But of course I'm still wandering why I'm not able to do the same thing in mx21. Just that.

I will get back by the end of the day.

Best regards

Re: Cannot access an ISP blocked site via mx linux v21 (32bits)

Posted: Mon Feb 19, 2024 6:53 am
by j2mcgreg
When I say I cannot access the blocked site I mean thar I get redirected to a page that says something like... The authority bla bla bla has determined that visits or whatever you a this site is in violation of copyrights"
We will not allow this forum to be used for instructions on circumventing copyright.

This thread is locked.