6

OISD blocking github.com?

I'm getting github.com blocked by oisd according to my logs in nextdns - but I'm pretty sure that's not actually in the oisd blocklist.

17 replies

null
    • Shailendra
    • 2 yrs ago
    • Reported - view

    yes me too here, github is being blocked

    • jdoss
    • 2 yrs ago
    • Reported - view

    Yep, I am seeing github.com resolve to 0.0.0.0 too. I just added it to my Allowlist and it is now resolving correctly. github.com should be scrubbed from any third party lists to prevent this in the future.

     

    # dig github.com @45.90.28.108 +short
0.0.0.0
    • vi_bolo
    • 2 yrs ago
    • Reported - view

    Same. The SearXNG instance I've been using for the past two weeks at searxng.dupa.edu.pl also.

    • Martheen
    • 2 yrs ago
    • Reported - view

    I can confirm that github isn't in oisd (or any lists for that matter) https://rethinkdns.com/search?q=github.com yet NextDNS act as if it is. Other DNS servers using oisd don't have this problem either.

      • Hey
      • 2 yrs ago
      • Reported - view

      Martheen That search domain clearly states that the last filter update was on the 5th it's 19th as of now with NextDNS having updated just 3 hours ago. Likely some sort of an issue with OISD as disabling it and using another filter to test completely fixes the issue, no components of NextDNS are blocking it.

      • szhu25
      • 2 yrs ago
      • Reported - view

      Hey Nope. OISD themselves does not report Github.com as blocked.

      • Martheen
      • 2 yrs ago
      • Reported - view

      Hey Actually, it turns out to be related to how NextDNS handle invalid entries. The OISD list currently has lines like 

      github.com/admin0365/ov/raw/main/ov%20du%20220722.pdf.zip
raw.githubusercontent.com/sgrfbnfhgrhthr/csdvmghfmgfd/main/zoom.zip

      those that don't really belong in the domain list (instead of path filters like EasyList), I try it on my own AdGuard Home, and even after explicitly updating the list, it just ignores the invalid entries. I'm guessing NextDNS and ControlD (from OISD automated report) just throw away the path and process it, while other servers ignore it.

      • Hey
      • 2 yrs ago
      • Reported - view

      Martheen I've seen a wildcard type filter for GitHub.com near the bottom likely that's what's triggering the services to block the entire domain. It's also closer to the bottom so that's another reason why I'm guessing that's the case.

      (As it was likely added recently by what I mean as at the bottom.)

    • szhu25
    • 2 yrs ago
    • Reported - view

    I was going to ask why my domain was listed as being blocked by OISD but OISD did not include my domain anyhow, then I saw this... GitHub is in the same status (OISD definitely won't block GitHub).

      • Martheen
      • 2 yrs ago
      • Reported - view

      Steven Z Try downloading the list manually and grep for your domain. Currently, there are several entries with full path, which should be useless for DNS blocking but somehow NextDNS and ControlD parse to become an entire domain block. AdGuard Home ignore such entries, I'm not sure if DNSWarden and AhaDNS ignore it too or they simply haven't fetched the latest list.

      • szhu25
      • 2 yrs ago
      • Reported - view

      Martheen Yeah I'm pretty sure my domain were not on it... I guess it's just matched something (that I don't know). 😂

      My local AdGuard Home instance use AdGuard DNS + NextDNS so it was partially fine until NextDNS answered it first

    • Maki
    • 2 yrs ago
    • Reported - view

    cdn.discordapp.com is being blocked for me too through OISD, I hope it gets fixed soon

      • Martheen
      • 2 yrs ago
      • Reported - view

      Maki Yep, there are a couple of such URL in URLhaus https://urlhaus.abuse.ch/url/2275509/ and got included in OISD (which should be a bug, because DNS blocking can't use them). This appears to be a mistake in OISD when taking entries from other list, combined with NextDNS not handling this edge case.

    • Ahmad
    • 2 yrs ago
    • Reported - view

    steamdb.info too got blocked

      • Martheen
      • 2 yrs ago
      • Reported - view

      Ahmad Can you confirm that the log says oisd block the list? I can't replicate it here, and grepping the OISD list doesn't show anything about steamdb.info

      • Ahmad
      • 2 yrs ago
      • Reported - view

      Martheen , same first i check on osid filter but there no named this site , so i think this CNAME blocked and now fixed 

    • Ahmad
    • 2 yrs ago
    • Reported - view

    They (oisd dev) fix it 
    https://www.reddit.com/r/oisd_blocklist/comments/y7ru30/bug_githubcom_and_more_got_blocked/

Login to reply

Content aside

  • 6 Likes
  • 2 yrs agoLast active
  • 17Replies
  • 334Views
  • 10 Following