6

OISD blocking github.com?

I'm getting github.com blocked by oisd according to my logs in nextdns - but I'm pretty sure that's not actually in the oisd blocklist.

17 replies

null
    • Shailendra
    • 1 yr ago
    • Reported - view

    yes me too here, github is being blocked

    • jdoss
    • 1 yr ago
    • Reported - view

    Yep, I am seeing github.com resolve to 0.0.0.0 too. I just added it to my Allowlist and it is now resolving correctly. github.com should be scrubbed from any third party lists to prevent this in the future.

     

    # dig github.com @45.90.28.108 +short
    0.0.0.0
    • vi_bolo
    • 1 yr ago
    • Reported - view

    Same. The SearXNG instance I've been using for the past two weeks at searxng.dupa.edu.pl also.

    • Martheen
    • 1 yr ago
    • Reported - view

    I can confirm that github isn't in oisd (or any lists for that matter) https://rethinkdns.com/search?q=github.com yet NextDNS act as if it is. Other DNS servers using oisd don't have this problem either.

      • Hey
      • 1 yr ago
      • Reported - view

      Martheen That search domain clearly states that the last filter update was on the 5th it's 19th as of now with NextDNS having updated just 3 hours ago. Likely some sort of an issue with OISD as disabling it and using another filter to test completely fixes the issue, no components of NextDNS are blocking it.

      • szhu25
      • 1 yr ago
      • Reported - view

      Hey Nope. OISD themselves does not report Github.com as blocked.

      • Martheen
      • 1 yr ago
      • Reported - view

      Hey Actually, it turns out to be related to how NextDNS handle invalid entries. The OISD list currently has lines like

      github.com/admin0365/ov/raw/main/ov%20du%20220722.pdf.zip
      raw.githubusercontent.com/sgrfbnfhgrhthr/csdvmghfmgfd/main/zoom.zip
      

      those that don't really belong in the domain list (instead of path filters like EasyList), I try it on my own AdGuard Home, and even after explicitly updating the list, it just ignores the invalid entries. I'm guessing NextDNS and ControlD (from OISD automated report) just throw away the path and process it, while other servers ignore it.

      • Hey
      • 1 yr ago
      • Reported - view

      Martheen I've seen a wildcard type filter for GitHub.com near the bottom likely that's what's triggering the services to block the entire domain. It's also closer to the bottom so that's another reason why I'm guessing that's the case.

      (As it was likely added recently by what I mean as at the bottom.)

    • szhu25
    • 1 yr ago
    • Reported - view

    I was going to ask why my domain was listed as being blocked by OISD but OISD did not include my domain anyhow, then I saw this... GitHub is in the same status (OISD definitely won't block GitHub).

      • Martheen
      • 1 yr ago
      • Reported - view

      Steven Z Try downloading the list manually and grep for your domain. Currently, there are several entries with full path, which should be useless for DNS blocking but somehow NextDNS and ControlD parse to become an entire domain block. AdGuard Home ignore such entries, I'm not sure if DNSWarden and AhaDNS ignore it too or they simply haven't fetched the latest list.

      • szhu25
      • 1 yr ago
      • Reported - view

      Martheen Yeah I'm pretty sure my domain were not on it... I guess it's just matched something (that I don't know). 😂

      My local AdGuard Home instance use AdGuard DNS + NextDNS so it was partially fine until NextDNS answered it first

    • Maki
    • 1 yr ago
    • Reported - view

    cdn.discordapp.com is being blocked for me too through OISD, I hope it gets fixed soon

      • Martheen
      • 1 yr ago
      • Reported - view

      Maki Yep, there are a couple of such URL in URLhaus https://urlhaus.abuse.ch/url/2275509/ and got included in OISD (which should be a bug, because DNS blocking can't use them). This appears to be a mistake in OISD when taking entries from other list, combined with NextDNS not handling this edge case.

    • Ahmad
    • 1 yr ago
    • Reported - view

    steamdb.info too got blocked

      • Martheen
      • 1 yr ago
      • Reported - view

      Ahmad Can you confirm that the log says oisd block the list? I can't replicate it here, and grepping the OISD list doesn't show anything about steamdb.info

      • Ahmad
      • 1 yr ago
      • Reported - view

      Martheen , same first i check on osid filter but there no named this site , so i think this CNAME blocked and now fixed 

    • Ahmad
    • 1 yr ago
    • Reported - view

Content aside

  • 6 Likes
  • 1 yr agoLast active
  • 17Replies
  • 301Views
  • 10 Following