Strange connectivity issue to the shop & forums.

Flibster · 29 May 2018 at 14:35

Can access the shop site and forums fine on my phone connection, however over the network it's just craps out with a "Connection is not secure" and refuses to let me go any further.

Just got a VPN trial and it work fine again, ish... VPN seems a touch flaky tbh.

This happens on all the PC in the house, plus tabs and phone when connected to the wifi. It's the only site it happens on too. Everything else is fine.

Done a firmware update on the router and rebooted everything... Still no go.

Have a traceroute.

Code:

Tracing route to forums.overclockers.co.uk [185.103.4.11]
over a maximum of 30 hops:

  1     1 ms    <1 ms    <1 ms  192.168.0.1
  2    16 ms    16 ms    16 ms  losubs.subs.bng1.th-lon.zen.net.uk [62.3.80.17]
  3    16 ms    22 ms    16 ms  ae1-177.cr2.th-lon.zen.net.uk [62.3.80.38]
  4    20 ms    20 ms    21 ms  vl-50.ae43.agg2.lond1.ptn.zen.net.uk [51.148.73.54]
  5    17 ms    17 ms    17 ms  ae-4.cor1.lond1.ptn.zen.net.uk [51.148.73.7]
  6    35 ms    24 ms    24 ms  ae-2.cor1.lond2.ptn.zen.net.uk [51.148.73.3]
  7    23 ms    26 ms    24 ms  ae-16.agg2.lond2.ptn.zen.net.uk [51.148.73.30]
  8    24 ms    23 ms    24 ms  185.84.17.181
  9    17 ms    17 ms    20 ms  ae-2.r04.londen05.uk.bb.gin.ntt.net [129.250.6.9]
 10    17 ms    18 ms    18 ms  ae-0.r24.londen12.uk.bb.gin.ntt.net [129.250.4.140]
 11    17 ms    17 ms    16 ms  ae-8.r02.londen03.uk.bb.gin.ntt.net [129.250.4.22]
 12    24 ms    33 ms    19 ms  83.217.238.18
 13    17 ms    24 ms    24 ms  ve160.er2.thn.as50056.net [178.18.119.90]
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16    17 ms    17 ms    17 ms  ve926.er8.vta.as50056.net [31.28.68.41]
 17  forums.overclockers.co.uk [185.103.4.11]  reports: Destination protocol unreachable.

Trace complete.

Same on Chrome and Firefox. Both latest versions.

Any ideas?

ChrisD. · 29 May 2018 at 15:06

Is the PC wired?
Do other sites such as Google, Amazon etc work fine?

Flibster · 29 May 2018 at 16:00

ChrisD. said:
Is the PC wired?
Do other sites such as Google, Amazon etc work fine?

PC's are connected via Cat6 through Netgear switches.
Everything else works fine. Is just the shop and forums here.

[edit]
2 windows 7 machines
1 Windows XP machine
1 Server 2008 R2 machine
1 Server 2012 R2 machine

Haven't tried the browser in the fire stick or android box yet...

Android box running chrome, no go.

The site cannot be reached.
forums.overclockers.co.uk unexpectedly closed the connection.

ERR_CONNECTION_CLOSED

bremen1874 · 29 May 2018 at 16:40

My tracert to forums.overclockers.co.uk also terminates with the 'Destination protocol unreachable' message.

The error isn't stopping me using the forum to post this.

Steampunk · 29 May 2018 at 16:46

I've been experiencing the same thing since last night. I can get around it by disabling Kaspersky's network monitoring, but it's only an issue on OCUK's forum and shop. I'm inclined to think there's something up with OCUK that is being picked up by Kaspersky's web checking, and throwing up an insecure connection error.

Flibster · 29 May 2018 at 16:48

Interesting...

I have zero connectivity to either when not using the VPN or mobile tethering. And the VPN is being cancelled as it's really flaky. Taking forever to connect to sites and just being unbelievable slow.

Hmmm.. Private Internet Access VPN. Yup. I can speedily access the other machines on the network and nothing more, sounds pretty private to me.

Steampunk said:
I've been experiencing the same thing since last night. I can get around it by disabling Kaspersky's network monitoring, but it's only an issue on OCUK's forum and shop. I'm inclined to think there's something up with OCUK that is being picked up by Kaspersky's web checking, and throwing up an insecure connection error.

Not using Kaspersky. This is just flat out not connecting.

bledd · 29 May 2018 at 17:59

Try changing your DNS server to 1.1.1.1

And get rid of XP!

Flibster · 29 May 2018 at 18:11

bledd said:
Try changing your DNS server to 1.1.1.1

And get rid of XP!

Already using 1.1.1.1 and 8.8.8.8 as primary and secondary.

XP has to stay. Have some hardware and software here that only works with XP. Only allowed it access to the outside world to test, then back on lockdown.

Steampunk · 29 May 2018 at 18:19

It's weird because I can often get to the main forum page, then maybe a couple of others, then it starts to throw up errors. Looks like a TLS handshake error. Maybe TLS is failing, and Kaspersky it stopping it connecting insecurely.

ChrisD. · 29 May 2018 at 18:56

OP, are you running through a corporate/company firewall?

Flibster · 29 May 2018 at 19:03

ChrisD. said:
OP, are you running through a corporate/company firewall?

Nope. Just the windows and router built ins.

Steampunk · 29 May 2018 at 19:12

My traceroutes also look pretty awful:

Code:

Tracing route to forums.overclockers.co.uk [185.103.4.11]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  router.asus.com [192.168.1.1]
  2     *        *        *     Request timed out.
  3    11 ms    12 ms    16 ms  haye-core-2a-xe-233-0.network.virginmedia.net [62.253.8.121]
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7    19 ms    21 ms    21 ms  tcl5-ic-6-ae0-0.network.virginmedia.net [62.254.85.66]
  8    27 ms    26 ms    21 ms  e1-3.er1.thn.as50056.net [195.66.225.217]
  9    22 ms    24 ms    24 ms  ve160.er2.thn.as50056.net [178.18.119.90]
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13    29 ms    27 ms    25 ms  ve933.er11.ldx.as50056.net [31.28.68.47]
 14    20 ms    20 ms    21 ms  ve933.er8.vta.as50056.net [31.28.68.46]
 15  forums.overclockers.co.uk [185.103.4.11]  reports: Destination protocol unreachable.

Fair enough, I know there's a lot of network routers that de-prioritise traceroute/ping when they are busy, but "destination protocol unreachable" looks wonky.

Flibster · 29 May 2018 at 19:53

Steampunk said:
It's weird because I can often get to the main forum page, then maybe a couple of others, then it starts to throw up errors. Looks like a TLS handshake error. Maybe TLS is failing, and Kaspersky it stopping it connecting insecurely.

Interestingly, just been playing with firefox, when loading a page it comes up with 'performing TLS handshake' repeatedly in the corner.
Hmmm...

Steampunk · 29 May 2018 at 20:05

Flibster said:
Interestingly, just been playing with firefox, when loading a page it comes up with 'performing TLS handshake' repeatedly in the corner.
Hmmm...

Yep me too if it doesn't fail straight away or work in the first instance. I thought maybe they were under a DDOS and the server wasn't replying in time.

Flibster · 30 May 2018 at 02:46

And just like that, it's working again.

I've been out for 4 hours, so yeah...

Naginooh · 1 Jun 2018 at 14:02

Having the same issue, cant connect via 2 wired pc's or 2 mobiles on wifi from home internet, turn off wifi on mobile and use data can connect to ocuk fine. Spent 30 mins on phone to isp and ran a trace, they say it must be a hop out of there control or something on ocuk's end.

I dont know myself, just reporting what was said and the problem i am having myself

MichaelAwkward · 23 Jul 2018 at 16:21

Sorry to bump, but currently having the same issue.

Forum/shop just won’t load. “Secure Connection Failed”. On multiple PCs and my phone. Works fine on 4G (hence being able to post this).

Very odd that it’s only OcUK. Every other site works fine.

bremen1874 · 11 Aug 2018 at 14:15

My turn to have the same problem.

Code:

Tracing route to forums.overclockers.co.uk [185.103.4.11]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.11.1
  2    16 ms    16 ms    16 ms  410.xe-2-2-0.central10.pcn-bng01.plus.net [84.93.253.64]
  3    16 ms    16 ms    17 ms  411.be5.pcn-ir01.plus.net [84.93.253.67]
  4    16 ms    17 ms    16 ms  core1-BE1.colindale.ukcore.bt.net [195.99.125.132]
  5    17 ms    17 ms    17 ms  195.99.127.81
  6    25 ms    19 ms    17 ms  t2c4-et-3-3-0-0.uk-lon1.eu.bt.net [166.49.211.246]
  7    18 ms    18 ms    18 ms  82.112.101.73
  8    27 ms    24 ms    23 ms  83.217.238.10
  9     *        *        *     Request timed out.
 10    24 ms    24 ms    25 ms  31.28.67.111
 11     *        *        *     Request timed out.
 12    27 ms    23 ms    23 ms  ve944.thn.as50056.net [31.28.67.108]
 13    24 ms    23 ms    23 ms  185.121.78.18
 14     *        *        *     Request timed out.
 15    27 ms    26 ms    24 ms  ve933.er8.vta.as50056.net [31.28.68.46]
 16  forums.overclockers.co.uk [185.103.4.11]  reports: Destination protocol unreachable.

Trace complete.

4G and connecting via a VPN works.

I'm with Plusnet. No other sites seem to have a problem.

bledd · 11 Aug 2018 at 14:41

bledd said:
Try changing your DNS server to 1.1.1.1

bremen1874 · 11 Aug 2018 at 14:52

No difference.

Doesn't the tracert prove that it isn't a resolution problem?

If it was Google's DNS (which is what I use) at fault I think more people would have a problem (maybe they have but can't connect to moan about it)?

If I tether my iPad to my phone and then configure the iPad to use Google's DNS I can still access the site.

I did ask if I could have triggered some deliberate blocking measure and was told no. I did wonder as I was playing with LastPass and logging in and out a lot immediately before the problem cropped up.