{"id":83,"date":"2015-01-28T09:53:12","date_gmt":"2015-01-27T20:53:12","guid":{"rendered":"https:\/\/micro.muppetz.com\/blog\/?p=83"},"modified":"2015-02-04T06:56:16","modified_gmt":"2015-02-03T17:56:16","slug":"asb-bank-and-tor","status":"publish","type":"post","link":"https:\/\/micro.muppetz.com\/blog\/2015\/01\/28\/asb-bank-and-tor\/","title":{"rendered":"ASB Bank and TOR"},"content":{"rendered":"

Sometime in early December I thought I’d have a play with TOR<\/a>. \u00a0I ran it up on micro and played with it for a few days. \u00a0I thought I’d “help the TOR world” by running an exit node, seeing as we have more bandwidth allocated to us than we use.<\/p>\n

After a few days though I figured hell, I probably wasn’t doing much to help, so I turned it off and forgot about it.<\/p>\n

Fast forward to a few weeks later: \u00a0Suddenly my wife can’t get to a website she needs to access. \u00a0Do some digging, turns out that it works from other IP’s, just not our home IP. \u00a0Our home IP is static, so I can’t just reboot and get a new one. \u00a0I email the people running the website and to my surprise, they’re very helpful. \u00a0They investigate and tell me that due to my IP having been a TOR node, it’s been blacklisted. \u00a0Their network gear auto-updates a blacklist every few weeks, so if we’re not longer a TOR node we should be removed.<\/p>\n

No worries, I put a bypass in place in our home router, using OpenVPN. \u00a0Annoying, but it works. \u00a0A couple of weeks later they email me to tell me that it’s all sorted now. I remove the bypass and their site still works. Thanks!<\/p>\n

Then\u00a0ASB FastNet<\/a>\u00a0<\/strong>stops working. Both the website and their Mobile App (which accesses MobileAPI.asbbank.co.nz, <\/em>a different IP than the Browser site.) \u00a0Argh!<\/p>\n

I can’t get a single communication out of them as to why it doesn’t work, but trying to connection to FastNet classic gives me:
\nmicro:~> curl -vv -I https:\/\/fnc.asbbank.co.nz<\/a>
\n* About to connect() to fnc.asbbank.co.nz port 443 (#0)
\n* Trying 210.55.180.58...
\n* Connection refused
\n* couldn't connect to host
\n* Closing connection #0
\ncurl: (7) couldn't connect to host<\/code><\/p>\n

Which is quite annoying. \u00a0So I have an OpenVPN bypass in place for it as well. \u00a0The problem is my OpenVPN bypass is quite flakey, mostly due to the way I’ve setup OpenVPN. \u00a0It doesn’t reconnect properly when the tunnel drops, which it does every now and then on the end of a consumer grade Internet Service.<\/p>\n

Can I get hold of anyone at ASB to help me? \u00a0Tell me why the IP’s blacklisted? \u00a0Nope. \u00a0I’ve emailed, prodded. \u00a0Very frustrating. \u00a0Please, someone at ASB in the Network Team get in contact. \u00a0Tell me what I can do to get removed\/get this fixed.<\/p>\n

Thanks,<\/p>\n

Tim<\/p>\n

Update:\u00a0<\/strong>ASB use BrightCloud’s IP Reputation<\/a> service. \u00a0Once I filed a request with Brightcloud and they verified we weren’t a TOR exit node anymore, they updated the status of our IP address and we can once again access ASB directly. \u00a0Thanks ASB for getting back to me after I made a lot of noise…<\/p>\n","protected":false},"excerpt":{"rendered":"

Sometime in early December I thought I’d have a play with TOR. \u00a0I ran it up on micro and played with it for a few days. \u00a0I thought I’d “help the TOR world” by running an exit node, seeing as we have more bandwidth allocated to us than we use. After a few days though […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,11,18,10],"tags":[34,69,16],"class_list":["post-83","post","type-post","status-publish","format-standard","hentry","category-computers","category-routing","category-security","category-technical","tag-annoyed","tag-banking","tag-networking"],"_links":{"self":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/83","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/comments?post=83"}],"version-history":[{"count":4,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/83\/revisions"}],"predecessor-version":[{"id":113,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/83\/revisions\/113"}],"wp:attachment":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/media?parent=83"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/categories?post=83"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/tags?post=83"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}