ooni / probe

OONI Probe network measurement tool for detecting internet censorship
https://ooni.org/install
BSD 3-Clause "New" or "Revised" License
765 stars 142 forks source link

CSmonitor.com: False positive TCP/IP blocking #2456

Closed arky closed 10 months ago

arky commented 1 year ago

Describe the bug

False positive 'TCP/IP' blocking for CSMonitor.com website. The site is accessible in a browser.

https://explorer.ooni.io/measurement/20230419T075440Z_webconnectivity_KH_23673_n1_v7oDhPpabCyZbg2d?input=https://www.csmonitor.com/

To Reproduce

$ ./miniooni web_connectivity@v0.5 -i https://www.csmonitor.com [ 0.000037] Current time: 2023-04-19 15:44:29 +07 [ 0.000065] miniooni home directory: $HOME/.miniooni [ 0.000173] Looking up OONI backends; please be patient... [ 0.839894] sessionresolver: https://cloudflare-dns.com/dns-query... ok [ 1.454217] session: using probe services: {Address:https://api.ooni.io Type:https Front:} [ 1.454251] Looking up your location; please be patient... [ 1.454323] iplookup: using stun_ekiga [ 2.215977] - country: KH [ 2.215993] - network: COGETEL Co., Ltd (AS23673) [ 2.215999] - resolver's IP: 74.125.190.149 [ 2.216003] - resolver's network: Google LLC (AS15169) [ 2.216036] [1/1] running with input: https://www.csmonitor.com [ 2.291449] [#3] lookup www.csmonitor.com using system... ok [ 2.294731] [#1] lookup www.csmonitor.com using 8.8.4.4:53... ok [ 2.461015] [#2] lookup www.csmonitor.com using https://dns.google/dns-query... ok [ 2.561109] DNS whoami for 8.8.4.4:53/udp resolver: [{Address:74.125.190.149}] [ 2.619442] DNS whoami for system resolver: [{Address:74.125.190.149}] [ 2.619794] using resolved addrs: [{Addr:2600:9000:203f:fe00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:3600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:6e00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:5e00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:e000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4400:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:9000:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:0:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:a000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:7200:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:f000:1d:c25c:d00:93a1 Flags:1} {Addr:65.9.17.59 Flags:7} {Addr:65.9.17.12 Flags:7} {Addr:2600:9000:203f:de00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:9e00:1d:c25c:d00:93a1 Flags:2} {Addr:65.9.17.95 Flags:7} {Addr:2600:9000:203f:e00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:c600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:da00:1d:c25c:d00:93a1 Flags:4} {Addr:65.9.17.106 Flags:7} {Addr:2600:9000:203f:1a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:d600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:6c00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:dc00:1d:c25c:d00:93a1 Flags:2}] [ 2.619981] prioritySelector: create with [{Addr:2600:9000:203f:fe00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:3600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:6e00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:5e00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:e000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4400:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:9000:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:0:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:a000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:7200:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:f000:1d:c25c:d00:93a1 Flags:1} {Addr:65.9.17.59 Flags:7} {Addr:65.9.17.12 Flags:7} {Addr:2600:9000:203f:de00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:9e00:1d:c25c:d00:93a1 Flags:2} {Addr:65.9.17.95 Flags:7} {Addr:2600:9000:203f:e00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:c600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:da00:1d:c25c:d00:93a1 Flags:4} {Addr:65.9.17.106 Flags:7} {Addr:2600:9000:203f:1a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:d600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:6c00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:dc00:1d:c25c:d00:93a1 Flags:2}] [ 2.623402] [#10] GET https://www.csmonitor.com using [2600:9000:203f:4400:1d:c25c:d00:93a1]:443... network_unreachable [ 2.624149] [#21] GET https://www.csmonitor.com using [2600:9000:203f:9e00:1d:c25c:d00:93a1]:443... network_unreachable [ 2.624178] [#6] GET https://www.csmonitor.com using [2600:9000:203f:6e00:1d:c25c:d00:93a1]:443... network_unreachable [ 2.624197] [#16] GET https://www.csmonitor.com using [2600:9000:203f:7200:1d:c25c:d00:93a1]:443... network_unreachable [ 2.624233] [#4] GET https://www.csmonitor.com using [2600:9000:203f:fe00:1d:c25c:d00:93a1]:443... network_unreachable [ 2.624233] [#12] GET https://www.csmonitor.com using [2600:9000:203f:0:1d:c25c:d00:93a1]:443... network_unreachable [ 2.662783] prioritySelector: conn 65.9.17.106:443: granted permission: true [ 2.673625] prioritySelector: conn 65.9.17.12:443: denied permission: timed out sending [ 2.673641] [#19] GET https://www.csmonitor.com using 65.9.17.12:443... stop after TLS handshake [ 2.673663] prioritySelector: conn 65.9.17.59:443: denied permission: timed out sending [ 2.673675] [#18] GET https://www.csmonitor.com using 65.9.17.59:443... stop after TLS handshake [ 2.677590] prioritySelector: conn 65.9.17.95:443: denied permission: timed out sending [ 2.677604] [#22] GET https://www.csmonitor.com using 65.9.17.95:443... stop after TLS handshake [ 2.711250] [#27] GET https://www.csmonitor.com using 65.9.17.106:443... ok [ 2.940617] sessionresolver: https://cloudflare-dns.com/dns-query... ok [ 3.122007] [#9] GET https://www.csmonitor.com using [2600:9000:203f:e000:1d:c25c:d00:93a1]:443... in progress [ 3.122100] [#14] GET https://www.csmonitor.com using [2600:9000:203f:a00:1d:c25c:d00:93a1]:443... in progress [ 3.123180] [#11] GET https://www.csmonitor.com using [2600:9000:203f:9000:1d:c25c:d00:93a1]:443... in progress [ 3.123252] [#26] GET https://www.csmonitor.com using [2600:9000:203f:da00:1d:c25c:d00:93a1]:443... in progress [ 3.123315] control for https://www.csmonitor.com using https://2.th.ooni.org... in progress [ 3.123353] [#30] GET https://www.csmonitor.com using [2600:9000:203f:6c00:1d:c25c:d00:93a1]:443... in progress [ 3.123350] [#8] GET https://www.csmonitor.com using [2600:9000:203f:5e00:1d:c25c:d00:93a1]:443... in progress [ 3.123382] [#31] GET https://www.csmonitor.com using [2600:9000:203f:dc00:1d:c25c:d00:93a1]:443... in progress [ 3.123392] [#24] GET https://www.csmonitor.com using [2600:9000:203f:c600:1d:c25c:d00:93a1]:443... in progress [ 3.123432] [#25] GET https://www.csmonitor.com using [2600:9000:203f:4c00:1d:c25c:d00:93a1]:443... in progress [ 3.123445] [#23] GET https://www.csmonitor.com using [2600:9000:203f:e00:1d:c25c:d00:93a1]:443... in progress [ 3.123434] [#7] GET https://www.csmonitor.com using [2600:9000:203f:2600:1d:c25c:d00:93a1]:443... in progress [ 3.124729] [#17] GET https://www.csmonitor.com using [2600:9000:203f:f000:1d:c25c:d00:93a1]:443... in progress [ 3.124807] [#29] GET https://www.csmonitor.com using [2600:9000:203f:d600:1d:c25c:d00:93a1]:443... in progress [ 3.124858] [#28] GET https://www.csmonitor.com using [2600:9000:203f:1a00:1d:c25c:d00:93a1]:443... in progress [ 3.124887] [#5] GET https://www.csmonitor.com using [2600:9000:203f:3600:1d:c25c:d00:93a1]:443... in progress [ 3.124918] [#20] GET https://www.csmonitor.com using [2600:9000:203f:de00:1d:c25c:d00:93a1]:443... in progress [ 3.124935] [#15] GET https://www.csmonitor.com using [2600:9000:203f:2c00:1d:c25c:d00:93a1]:443... in progress [ 3.124943] [#13] GET https://www.csmonitor.com using [2600:9000:203f:a000:1d:c25c:d00:93a1]:443... in progress [ 3.653846] [#13] GET https://www.csmonitor.com using [2600:9000:203f:a000:1d:c25c:d00:93a1]:443... network_unreachable [ 4.116858] control for https://www.csmonitor.com using https://2.th.ooni.org... ok [ 4.116900] additional addrs discovered by the TH: [2600:9000:23d4:f000:1d:c25c:d00:93a1 2600:9000:23d4:1400:1d:c25c:d00:93a1 2600:9000:23d4:ce00:1d:c25c:d00:93a1 2600:9000:23d4:8200:1d:c25c:d00:93a1 2600:9000:23d4:7400:1d:c25c:d00:93a1 2600:9000:23d4:1c00:1d:c25c:d00:93a1 2600:9000:23d4:9c00:1d:c25c:d00:93a1 18.164.68.63 18.164.68.17 18.164.68.28 18.164.68.80 2600:9000:23d4:de00:1d:c25c:d00:93a1] [ 4.539022] prioritySelector: conn 18.164.68.80:443: denied permission: timed out sending [ 4.539106] [#42] GET https://www.csmonitor.com using 18.164.68.80:443... stop after TLS handshake [ 4.591332] prioritySelector: conn 18.164.68.63:443: denied permission: timed out sending [ 4.591394] [#39] GET https://www.csmonitor.com using 18.164.68.63:443... stop after TLS handshake [ 4.593637] prioritySelector: conn 18.164.68.17:443: denied permission: timed out sending [ 4.593721] [#40] GET https://www.csmonitor.com using 18.164.68.17:443... stop after TLS handshake [ 4.617885] [#37] GET https://www.csmonitor.com using [2600:9000:23d4:1c00:1d:c25c:d00:93a1]:443... in progress [ 4.617888] [#34] GET https://www.csmonitor.com using [2600:9000:23d4:ce00:1d:c25c:d00:93a1]:443... in progress [ 4.617904] [#33] GET https://www.csmonitor.com using [2600:9000:23d4:1400:1d:c25c:d00:93a1]:443... in progress [ 4.617913] [#35] GET https://www.csmonitor.com using [2600:9000:23d4:8200:1d:c25c:d00:93a1]:443... in progress [ 4.617921] [#41] GET https://www.csmonitor.com using 18.164.68.28:443... in progress [ 4.617923] [#32] GET https://www.csmonitor.com using [2600:9000:23d4:f000:1d:c25c:d00:93a1]:443... in progress [ 4.617926] [#36] GET https://www.csmonitor.com using [2600:9000:23d4:7400:1d:c25c:d00:93a1]:443... in progress [ 4.617934] [#38] GET https://www.csmonitor.com using [2600:9000:23d4:9c00:1d:c25c:d00:93a1]:443... in progress [ 4.617946] [#43] GET https://www.csmonitor.com using [2600:9000:23d4:de00:1d:c25c:d00:93a1]:443... in progress [ 4.742824] prioritySelector: conn 18.164.68.28:443: denied permission: timed out sending [ 4.742871] [#41] GET https://www.csmonitor.com using 18.164.68.28:443... stop after TLS handshake [ 5.125673] [#33] GET https://www.csmonitor.com using [2600:9000:23d4:1400:1d:c25c:d00:93a1]:443... network_unreachable [ 5.668161] [#8] GET https://www.csmonitor.com using [2600:9000:203f:5e00:1d:c25c:d00:93a1]:443... network_unreachable [ 7.141800] [#35] GET https://www.csmonitor.com using [2600:9000:23d4:8200:1d:c25c:d00:93a1]:443... network_unreachable [ 9.734204] [#29] GET https://www.csmonitor.com using [2600:9000:203f:d600:1d:c25c:d00:93a1]:443... network_unreachable [ 9.734258] [#31] GET https://www.csmonitor.com using [2600:9000:203f:dc00:1d:c25c:d00:93a1]:443... network_unreachable [ 9.734261] [#25] GET https://www.csmonitor.com using [2600:9000:203f:4c00:1d:c25c:d00:93a1]:443... network_unreachable [ 12.623289] [#11] GET https://www.csmonitor.com using [2600:9000:203f:9000:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623344] [#23] GET https://www.csmonitor.com using [2600:9000:203f:e00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623451] [#9] GET https://www.csmonitor.com using [2600:9000:203f:e000:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623473] [#14] GET https://www.csmonitor.com using [2600:9000:203f:a00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623454] [#7] GET https://www.csmonitor.com using [2600:9000:203f:2600:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623511] [#24] GET https://www.csmonitor.com using [2600:9000:203f:c600:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623565] [#30] GET https://www.csmonitor.com using [2600:9000:203f:6c00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623590] [#5] GET https://www.csmonitor.com using [2600:9000:203f:3600:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623635] [#26] GET https://www.csmonitor.com using [2600:9000:203f:da00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623637] [#20] GET https://www.csmonitor.com using [2600:9000:203f:de00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623708] [#28] GET https://www.csmonitor.com using [2600:9000:203f:1a00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623748] [#17] GET https://www.csmonitor.com using [2600:9000:203f:f000:1d:c25c:d00:93a1]:443... generic_timeout_error [ 12.623772] [#15] GET https://www.csmonitor.com using [2600:9000:203f:2c00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118538] [#43] GET https://www.csmonitor.com using [2600:9000:23d4:de00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118575] [#37] GET https://www.csmonitor.com using [2600:9000:23d4:1c00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118671] [#36] GET https://www.csmonitor.com using [2600:9000:23d4:7400:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118736] [#32] GET https://www.csmonitor.com using [2600:9000:23d4:f000:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118745] [#34] GET https://www.csmonitor.com using [2600:9000:23d4:ce00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.118749] [#38] GET https://www.csmonitor.com using [2600:9000:23d4:9c00:1d:c25c:d00:93a1]:443... generic_timeout_error [ 14.119108] DNS: address 65.9.17.106: not resolved by TH [ 14.119125] DNS: address 2600:9000:203f:2c00:1d:c25c:d00:93a1: not resolved by TH [ 14.119135] DNS: address 2600:9000:203f:da00:1d:c25c:d00:93a1: not resolved by TH [ 14.119144] DNS: address 2600:9000:203f:e000:1d:c25c:d00:93a1: not resolved by TH [ 14.119157] DNS: address 2600:9000:203f:9e00:1d:c25c:d00:93a1: not resolved by TH [ 14.119172] DNS: address 65.9.17.12: not resolved by TH [ 14.119187] DNS: address 2600:9000:203f:6c00:1d:c25c:d00:93a1: not resolved by TH [ 14.119199] DNS: address 2600:9000:203f:de00:1d:c25c:d00:93a1: not resolved by TH [ 14.119210] DNS: address 2600:9000:203f:c600:1d:c25c:d00:93a1: not resolved by TH [ 14.119221] DNS: address 2600:9000:203f:9000:1d:c25c:d00:93a1: not resolved by TH [ 14.119232] DNS: address 65.9.17.59: not resolved by TH [ 14.119269] DNS: address 2600:9000:203f:f000:1d:c25c:d00:93a1: not resolved by TH [ 14.119279] DNS: address 2600:9000:203f:e00:1d:c25c:d00:93a1: not resolved by TH [ 14.119288] DNS: address 2600:9000:203f:a00:1d:c25c:d00:93a1: not resolved by TH [ 14.119296] DNS: address 2600:9000:203f:6e00:1d:c25c:d00:93a1: not resolved by TH [ 14.119305] DNS: address 2600:9000:203f:4c00:1d:c25c:d00:93a1: not resolved by TH [ 14.119314] DNS: address 2600:9000:203f:3600:1d:c25c:d00:93a1: not resolved by TH [ 14.119325] DNS: address 2600:9000:203f:4400:1d:c25c:d00:93a1: not resolved by TH [ 14.119347] DNS: address 2600:9000:203f:dc00:1d:c25c:d00:93a1: not resolved by TH [ 14.119361] DNS: address 2600:9000:203f:d600:1d:c25c:d00:93a1: not resolved by TH [ 14.119372] DNS: address 2600:9000:203f:5e00:1d:c25c:d00:93a1: not resolved by TH [ 14.119383] DNS: address 2600:9000:203f:a000:1d:c25c:d00:93a1: not resolved by TH [ 14.119392] DNS: address 2600:9000:203f:1a00:1d:c25c:d00:93a1: not resolved by TH [ 14.119400] DNS: address 2600:9000:203f:fe00:1d:c25c:d00:93a1: not resolved by TH [ 14.119418] DNS: address 2600:9000:203f:7200:1d:c25c:d00:93a1: not resolved by TH [ 14.119436] DNS: address 65.9.17.95: not resolved by TH [ 14.119449] DNS: address 2600:9000:203f:0:1d:c25c:d00:93a1: not resolved by TH [ 14.119460] DNS: address 2600:9000:203f:2600:1d:c25c:d00:93a1: not resolved by TH [ 14.119559] DNS: address 2600:9000:203f:de00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119573] DNS: address 2600:9000:203f:e00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119588] DNS: address 2600:9000:203f:c600:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119616] DNS: address 2600:9000:203f:2600:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119629] DNS: address 2600:9000:203f:e000:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119640] DNS: address 2600:9000:203f:9000:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119652] DNS: address 2600:9000:203f:f000:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119664] DNS: address 2600:9000:203f:1a00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119682] DNS: address 2600:9000:203f:6c00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119699] DNS: address 2600:9000:203f:a00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119715] DNS: address 2600:9000:203f:da00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119727] DNS: address 2600:9000:203f:3600:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.119741] DNS: address 2600:9000:203f:2c00:1d:c25c:d00:93a1: cannot confirm using TLS handshake [ 14.120316] DNS: addr 2600:9000:23d4:1400:1d:c25c:d00:93a1 has AS16509 [ 14.120334] DNS: addr 2600:9000:23d4:ce00:1d:c25c:d00:93a1 has AS16509 [ 14.120344] DNS: addr 2600:9000:203f:de00:1d:c25c:d00:93a1 has AS16509 [ 14.120354] DNS: addr 2600:9000:203f:da00:1d:c25c:d00:93a1 has AS16509 [ 14.120367] DNS: addr 2600:9000:203f:3600:1d:c25c:d00:93a1 has AS16509 [ 14.120376] DNS: addr 18.164.68.28 has AS16509 [ 14.120388] DNS: addr 2600:9000:23d4:de00:1d:c25c:d00:93a1 has AS16509 [ 14.120399] DNS: addr 2600:9000:23d4:1c00:1d:c25c:d00:93a1 has AS16509 [ 14.120410] DNS: addr 2600:9000:23d4:9c00:1d:c25c:d00:93a1 has AS16509 [ 14.120421] DNS: addr 2600:9000:203f:2600:1d:c25c:d00:93a1 has AS16509 [ 14.120433] DNS: addr 2600:9000:203f:9000:1d:c25c:d00:93a1 has AS16509 [ 14.120444] DNS: addr 2600:9000:203f:6c00:1d:c25c:d00:93a1 has AS16509 [ 14.120455] DNS: addr 18.164.68.63 has AS16509 [ 14.120467] DNS: addr 2600:9000:23d4:f000:1d:c25c:d00:93a1 has AS16509 [ 14.120480] DNS: addr 2600:9000:23d4:8200:1d:c25c:d00:93a1 has AS16509 [ 14.120491] DNS: addr 2600:9000:203f:c600:1d:c25c:d00:93a1 has AS16509 [ 14.120502] DNS: addr 2600:9000:203f:e000:1d:c25c:d00:93a1 has AS16509 [ 14.120513] DNS: addr 2600:9000:203f:a00:1d:c25c:d00:93a1 has AS16509 [ 14.120524] DNS: addr 18.164.68.80 has AS16509 [ 14.120536] DNS: addr 18.164.68.17 has AS16509 [ 14.120547] DNS: addr 2600:9000:23d4:7400:1d:c25c:d00:93a1 has AS16509 [ 14.120559] DNS: addr 2600:9000:203f:e00:1d:c25c:d00:93a1 has AS16509 [ 14.120571] DNS: addr 2600:9000:203f:f000:1d:c25c:d00:93a1 has AS16509 [ 14.120582] DNS: addr 2600:9000:203f:1a00:1d:c25c:d00:93a1 has AS16509 [ 14.120593] DNS: addr 2600:9000:203f:2c00:1d:c25c:d00:93a1 has AS16509 [ 14.120610] DNSConsistency: consistent

[ 14.120925] HTTP: HTTPS && no error => #27 is successful [ 14.120929] ANOMALY: flags=34, accessible=false, blocking=tcp_ip [ 14.130941] submitting measurement to OONI collector; please be patient... [ 14.358062] New reportID: 20230419T084444Z_webconnectivity_KH_23673_n1_olvdUtwTuTjZNVPo [ 15.507386] saving measurement to disk [ 15.514407] experiment: recv 0.00 byte, sent 0.00 byte [ 15.514634] sessionresolver: [{"URL":"https://cloudflare-dns.com/dns-query","Score":1},{"URL":"http3://cloudflare-dns.com/dns-query","Score":0.99900001},{"URL":"http3://mozilla.cloudflare-dns.com/dns-query","Score":0.99900001},{"URL":"system:///","Score":0},{"URL":"https://mozilla.cloudflare-dns.com/dns-query","Score":0},{"URL":"http3://dns.google/dns-query","Score":0},{"URL":"https://dns.quad9.net/dns-query","Score":0},{"URL":"https://dns.google/dns-query","Score":0}] [ 15.514696] whole session: recv 15.56 kbyte, sent 332.12 kbyte

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots

If applicable, add screenshots to help explain your problem.

System information (if applicable):

Additional context

Add any other context about the problem here.

arky commented 1 year ago

This is caused by IPv6 configuration issue where the IPv6 address is present on the local lan but not connected to the internet as ISP doesn't support it.

Disabling IPV6 managed to resolve this false positive.

A good use for having user configuration IPv6 configuration option as suggested in #2324

arky commented 10 months ago

Thanks @bassosimone