I enabled a new security feature for the site yesterday afternoon. It's a Web Application Firewall (WAF) service from StackPath, our CDN provider. The WAF learns our typical traffic patterns and can be configured to block certain types of traffic. At it learns I'm tuning the rules and policies. So if you get a message like this we're aware and are monitoring things. If you browse this site from your own private VPN service hosted through an ISP or cloud hosting provider you are likely to get blocked with the current rules. We're wasting a huge amount of bandwidth to people crawling/scraping content using providers like Amazon Web Services. So we're blocking that kind of traffic for now. That may change in the future. If you get the captcha screen from StackPath it's because you're using the site in a way that doesn't match our 'normal' traffic patterns. Fill out the form to let the WAF know you're a real human and it will learn. Edited by - Drew Black on Oct 25 2018 Edited by - Drew Black on Nov 22 2018
yesterday (I think immediately after activation), I was blocked (but that issue has been solved today). My non-usual way of using the site (which I don't think is non-usual anyway) is opening a forum, and then opening the threads i'm interested in in separate tabs. Which to the webserver probably looks suspicious, since I'm opening ~10 pages in quick succession. But nothing more than that.
If you happen to be in China, Ukraine, Russia, Romania, Pakistan, Banglasdesh or Malaysia you're likely going to be blocked as well. Edited by - Drew Black on 10/25/2018 11:58:17 AM
[Link]
Mass Facialties Deactivated User
"Facialized Vol. 7" 2021 AVN Awards Winner: Best Oral Movie 9308 Posts 9/13
Posted - Oct 25 2018 : 2:32PM
Thanks for letting us know, Drew. I haven't been blocked, but the "type in the letters you see in this box" page did come up on me a couple times since yesterday.
I was blocked from the forum yesterday for some hours , but got no previous warning . I also did not have the possibility to fill out the form to prove that I´m human . Maybe unusual : I go to my list of subscribed topics and open many of them one after another and then post in some of them . I have similar tactics for the subforums etc ... I think many users have different ways of finding the threads relevant to them that may not be the same as the most linear ones . Edited by - airtight_fanatic on 11/22/2018 7:57:58 PM
I've been repeatedly blocked , as it appears ,when it happened I wasn't using anything than a direct connection to the site , no VPN , what triggers such response sometimes after a long time of regular use is the button "back" or the link "All forums" or the button "refresh" . no form ever appeared Sometimes I leave a window on the forum while surfing elsewhere and then get back to ADT and refresh , could this be something seen as wrong? Though I do this often but Stackpath only blocked me twice after that I can't see anything else that could be a problem Edited by - LCF on 12/4/2018 4:58:34 PM
I've been blocked several times. Usually it clears after a minute or two, but tonight it lasted for over an hour and perhaps longer. I'm in the US so not my location nor am I using a VPN/proxy. It seems to happen if I open more than a few threads in a short period of time, a lot like what Airtight_fanatic mentioned. Also never seen any kind of captcha option either when it happens.
I turned off one of the anti-scraper policy rules. Opening a bunch of tabs simultaneously might look like a content scraper's activity. I'll keep an eye on it.
^ same here, though I might open multiple tabs but only one per site when I'm surfing over many different tasks
[Link]
Mass Facialties Deactivated User
"Facialized Vol. 7" 2021 AVN Awards Winner: Best Oral Movie 9308 Posts 9/13
Posted - Jan 24 2019 : 4:20PM
Currently, I'm not having an issue with this, however, I have been getting the "504 Gateway Time-out" page repeatedly over the past two days. EDIT: Disregard. I created a separate thread for the issue. Edited by - Mass Facialties on 1/26/2019 12:29:43 AM
I realize some members might be getting blocked this morning. I had to tighten up our rules. We're under active attack this morning by a bot army. I banned a user that was complaining about free speech and the (lack of) democracy on this site and the attack started an hour later.
When I type adultdvdtalk.com in to my address bar it gives me the following message:
I haven't been on the site for the last three days because of this! Finally, I remembered to type the direct address to the forum - forum.adultdvdtalk.com - and it worked.
It wasn't the WAF causing the problem. It was a DNS error. After the bot army fiasco the other day I moved some other pieces of ADT behind the proxy server and screwed up some of the settings.
For anyone that's getting blocked, you can email me at drew@adultdvdtalk.com and include the reference ID on the "You've been Blocked" Stackpath page. That will allow me to lookup what WAF rule you triggered and see if there's anything I can do to tune the rule a bit. I enabled a half-dozen new rules recently and the WAF is establishing a new baseline for what types of user behavior patters are normal and which appear to be malicious or automated.
I appreciate that you want to stop spammers and the like, Drew, but getting repeatedly challenged when I move around the forums becomes rather annoying. Is it not possible to stay in Stackpath's "good graces"?
If you get the challenge you can email me the reference number on the "You have been blocked" page and I can investigate which rule blocked you. drew @ adt
If your browser doesn't accept session cookies, or if you're using a VPN/Proxy/Anonymizer service then you're going to have a very difficult time using ADT.
The StackPath WAF has thwarted 2 very determined attacks recently. A well-known abusive user came back and made all kinds of threats so I had to ratchet up the rules to prevent a lot of stuff that we were otherwise allowing previously.
Edited by - Drew Black on 6/20/2019 5:48:53 PM
[Link]
joi Deactivated User
396 Posts 6/17
Posted - Jun 21 2019 : 6:44PM
seems to be working fine now. i will mail you next time it happens. i couldnt browse for almost 2 days. almost everytime i refreshed a page it resulted in captcha and sometimes in a block.