From owner-freebsd-questions@freebsd.org Tue Mar 31 21:38:27 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3FB1026D1E2 for ; Tue, 31 Mar 2020 21:38:27 +0000 (UTC) (envelope-from Norman.Gray@glasgow.ac.uk) Received: from plockton.cent.gla.ac.uk (plockton.cent.gla.ac.uk [130.209.16.75]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 48sN3x5xQJz4Nk8 for ; Tue, 31 Mar 2020 21:38:21 +0000 (UTC) (envelope-from Norman.Gray@glasgow.ac.uk) Received: from cas08.campus.gla.ac.uk ([130.209.14.165]) by plockton.cent.gla.ac.uk with esmtp (Exim 4.72) (envelope-from ) id 1jJOBM-0000PR-Uo; Tue, 31 Mar 2020 22:12:24 +0100 Received: from cas07.campus.gla.ac.uk (130.209.14.164) by cas08.campus.gla.ac.uk (130.209.14.165) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 31 Mar 2020 22:12:24 +0100 Received: from GBR01-CWL-obe.outbound.protection.outlook.com (104.47.20.56) by cas07.campus.gla.ac.uk (130.209.14.164) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 31 Mar 2020 22:12:24 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IdXn9FofyaoIUg0SxSU4yfWbr7CFD98HpvIHoTQW21C+F8mjy53C3YX5jAoLX7bF5avAeZbyHte5TlUCfsWsfAnOQ81ZQ8sXqO2p8dMItxaJ3qiuRhPYCt0eQ3yTMeqWevocdqTV7ZqSKPXwm6Xulv+ga2nvOqCfqLqeG1mutkYd3lF0/Y98xdr3oxHsHmarpnI1mNQllL4IBo9yxWNFfRqWIS6ymWPbpOAOIrYUxCO3CE/hzV0AvmFGk6jEYm8yje+rr09i+AB5yOXTIO4TlxLQ7smYzSxpjMOqdBgRFLiN/is9NFxj57m3RVNx/iIAfjrHYNkP0IhqcIvN5rLjBA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F6h7HZ0RSBldixSVuiMH4WlfokI3/no5seGM07SiNUU=; b=IZhIY8cI/bdCkSDtXNgjUXqdTBWhkrGejt3VGLxZVOf1HyVPKNEc8O6D8SaRNKgecdcziTN+EbrPJfQTZtuOYKvjD1IqF1Q9ndBl8T5ZmdcMmAlyslf4xGXL+Mmf5GeFV+h2MwU71v+WUDXobGvm9AxMydl5fSQr8DJ18nVkw/CUVoFvxj8YTaPHbp9dtyApIE68IhMwG5x0KVdyoKgBSUANNpCfnpI8sbeXns5BKjjEtmsfMXXm1VHLmGsGqYzr86tgA7TZ0F6GEafaHs++Yp5wPsbXXlTOWZtllZiUBQjmmhAhog2td+FG+roiOgGkYzn/VfyC5nBrVAlmO55DFw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=glasgow.ac.uk; dmarc=pass action=none header.from=glasgow.ac.uk; dkim=pass header.d=glasgow.ac.uk; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gla.onmicrosoft.com; s=selector2-gla-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F6h7HZ0RSBldixSVuiMH4WlfokI3/no5seGM07SiNUU=; b=e05H6O1pI0xxsqacfxBjgETWWqs28NM3EGylM6/411Hc3lC7PccIPg551F85wiP/9/WK46Nig308vMoFEpi16Mzd0LIIZtRZmsPCOzWo9kvkCr4amE29rkQor0F+/+IwS1gS/nL/1NTTRmNlSpS/zXhZDzBjdun7dUfwfLKfYFg= Received: from CWXP265MB0149.GBRP265.PROD.OUTLOOK.COM (10.164.144.19) by CWXP265MB1336.GBRP265.PROD.OUTLOOK.COM (20.176.47.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2856.20; Tue, 31 Mar 2020 21:12:23 +0000 Received: from CWXP265MB0149.GBRP265.PROD.OUTLOOK.COM ([fe80::6c2a:7278:7a4d:3891]) by CWXP265MB0149.GBRP265.PROD.OUTLOOK.COM ([fe80::6c2a:7278:7a4d:3891%3]) with mapi id 15.20.2856.019; Tue, 31 Mar 2020 21:12:22 +0000 From: "Norman Gray" To: Gary Aitken CC: FreeBSD Mailing List Subject: Re: weird 403 (forbidden) website access issue Date: Tue, 31 Mar 2020 22:12:21 +0100 X-Mailer: MailMate (1.13.1r5671) Message-ID: In-Reply-To: References: Content-Type: text/plain; format=flowed X-ClientProxiedBy: LO2P265CA0111.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:c::27) To CWXP265MB0149.GBRP265.PROD.OUTLOOK.COM (2603:10a6:401:8::19) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from [192.168.1.50] (2001:8b0:df5:af53:5bf:2528:c542:ae41) by LO2P265CA0111.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:c::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2856.20 via Frontend Transport; Tue, 31 Mar 2020 21:12:22 +0000 X-Mailer: MailMate (1.13.1r5671) X-Originating-IP: [2001:8b0:df5:af53:5bf:2528:c542:ae41] X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 435bc22e-0672-4887-195a-08d7d5b8344b X-MS-TrafficTypeDiagnostic: CWXP265MB1336: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:8882; X-Forefront-PRVS: 0359162B6D X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CWXP265MB0149.GBRP265.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(366004)(346002)(136003)(396003)(39860400002)(376002)(2906002)(8676002)(52116002)(5660300002)(33656002)(4326008)(16526019)(186003)(6486002)(86362001)(36756003)(53546011)(66476007)(66556008)(66946007)(786003)(6916009)(316002)(966005)(2616005)(15974865002)(81166006)(8936002)(66574012)(81156014)(478600001)(21443002); DIR:OUT; SFP:1101; Received-SPF: None (protection.outlook.com: glasgow.ac.uk does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData: jc59eMxffu3b8L+LrBBBJiQvp31xfbyQORccZAO2qdN2CW8grOc7HzlUwqHKZlacm5eZlXM2vSHZHMIF6Hvwwe0T57WjOM+S6CML+Xr0B7N4JE9M5pemoe8mrOd+XlEsYiWJcZQlww4JEIicHh5pyIXhNbTfr0C5uQ4PPdiZv++vDCtpJprAXk/VPl3HviVjpD8zuV9TbwJPQ4vLiJD8cA== X-MS-Exchange-CrossTenant-Network-Message-Id: 435bc22e-0672-4887-195a-08d7d5b8344b X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Mar 2020 21:12:22.7308 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 6e725c29-763a-4f50-81f2-2e254f0133c8 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: WaS/xBiFSWAXMcqWxFBjF+tiZxxbR5TB6OMlYfaURmxkiQPLt2kW1d/S1rdHOrt3mwWpw0ltQfhRKUZxKs54f58JY4clUiE/qLA3uArGj+c= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWXP265MB1336 X-OriginatorOrg: glasgow.ac.uk X-Rspamd-Queue-Id: 48sN3x5xQJz4Nk8 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gla.onmicrosoft.com header.s=selector2-gla-onmicrosoft-com header.b=e05H6O1p; dmarc=none; spf=none (mx1.freebsd.org: domain of Norman.Gray@glasgow.ac.uk has no SPF policy when checking 130.209.16.75) smtp.mailfrom=Norman.Gray@glasgow.ac.uk X-Spamd-Result: default: False [-4.95 / 15.00]; RCVD_COUNT_SEVEN(0.00)[7]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gla.onmicrosoft.com:s=selector2-gla-onmicrosoft-com]; HAS_XOIP(0.00)[]; FROM_HAS_DN(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[75.16.209.130.rep.mailspike.net : 127.0.0.18]; IP_SCORE(-0.95)[ipnet: 130.209.0.0/16(-4.38), asn: 786(-0.28), country: GB(-0.07)]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[glasgow.ac.uk]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; RCVD_IN_DNSWL_MED(-0.20)[75.16.209.130.list.dnswl.org : 127.0.11.2]; DKIM_TRACE(0.00)[gla.onmicrosoft.com:+]; RCPT_COUNT_TWO(0.00)[2]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:786, ipnet:130.209.0.0/16, country:GB]; ARC_ALLOW(-1.00)[i=1]; MID_RHS_MATCH_FROM(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 21:38:28 -0000 Gary, greetings. On 31 Mar 2020, at 21:33, Gary Aitken wrote: > The addr (www.ovandoschool.org) resolves to 69.175.87.226 > > If I type in 69.175.87.226 in the address bar, I get a 403 error > with a note > 69.175.87.226/cp_errordocument.shtml (port 80) > Seems to be accessible fine from windows machines going through the > same > fbsd 11.3-RELEASE-P6 gateway (not the same system as the one with the > browser having the problem). > > If I manually access from the failing fbsd system, it works: > > $ telnet 69.175.87.226 80 > Trying 69.175.87.226... > Connected to chi-node42.websitehostserver.net. > Escape character is '^]'. > GET / HTTP/1.1 > Host: www.ovandoschool.org If you type the IP address in to the address bar, then the browser will either send that as the 'Host' request header, or won't send the header at all. Thus the server, presuming it's set up to serve multiple hosts, won't know which website to send back. An alternative route to the same conclusion is that HTTP 1.1 requires the 'Host' request header, so if it's missing (or possibly if it's an IP address, or if it's not one of the hosts the server has been configured to handle), then... error document. If this works with any browser, then it _might_ be that the browser is being clever, doing a reverse lookup of the IP address, and sending the result as the 'Host' request header. In that case, a bit of tcpdump will clarify. Apologies if this is obvious, but if this isn't the problem, you might need to elaborate. Good wishes, Norman -- Norman Gray : http://www.astro.gla.ac.uk/users/norman/it/ Research IT Coordinator SUPA School of Physics and Astronomy, University of Glasgow, UK Charity number SC004401