3 ms·

You cant ban cloudflare without blocking half the internet. Part of the problem is that many ISPs use Akamai for dns, and they have a broken malware filtering

You cant ban cloudflare without blocking half the internet. Part of the problem is that many ISPs use Akamai for dns, and they have a broken malware filtering algorithm that causes a lot of false positives, resulting in sites being blocked for no reason, and there is no way to get whitelisted [1][2][3]. DoH has been a lifesaver for us. [1] https://community.spiceworks.com/topic/2331415-hosting-isp-dns-and-blacklisting-oh-my-help?page=1#entry-9420746 https://community.spiceworks.com/topic/2331415-hosting-isp-d... [2] https://webmasters.stackexchange.com/questions/120721/how-to-get-a-domain-unblocked-from-akamais-nominum https://webmasters.stackexchange.com/questions/120721/how-to... [3] https://community.akamai.com/customers/s/question/0D50f00005y5jGyCAI/problem-with-akamais-dga-suppobox-blacklist?language=en_US https://community.akamai.com/customers/s/question/0D50f00005...

Izkata 5y ago
> You cant ban cloudflare without blocking half the internet. Wrong stage of the request. The ISP can block the IP addresses the domain resolves to instead of the domain name itself. There'd still be fallout if shared hosting is involved, but nowhere near as bad as blocking Cloudflare.
- cpncrunch 5y ago
  In the case of a site using cloudflare, the ips will resolve to cloudflare, so impossible to block without blocking all those sites. Dns and the web traffic both use https to a cloudflare ip. As much as Ive complained in the past about cloudflare harbouring spammers, I have now come to the conclusion they are providing a very important service. It certainly saved me a huge amount of stress when our site was blocked as a false positive by akamai’s dodgy dns, which meant customers from a whole raftload of isps couldnt access our site. Not to mention the benefit to users in countries like Russia.

3 ms·

You cant ban cloudflare without blocking half the internet. Part of the problem is that many ISPs use Akamai for dns, and they have a broken malware filtering

by cpncrunch 5y ago

Izkata 5y ago
> You cant ban cloudflare without blocking half the internet. Wrong stage of the request. The ISP can block the IP addresses the domain resolves to instead of the domain name itself. There'd still be fallout if shared hosting is involved, but nowhere near as bad as blocking Cloudflare.
- cpncrunch 5y ago
  In the case of a site using cloudflare, the ips will resolve to cloudflare, so impossible to block without blocking all those sites. Dns and the web traffic both use https to a cloudflare ip. As much as Ive complained in the past about cloudflare harbouring spammers, I have now come to the conclusion they are providing a very important service. It certainly saved me a huge amount of stress when our site was blocked as a false positive by akamai’s dodgy dns, which meant customers from a whole raftload of isps couldnt access our site. Not to mention the benefit to users in countries like Russia.