Re: IETF web site behind CloudFlare

[Linus Nordberg <[e-mail]>]

Julian Reschke <[e-mail]> wrote
Thu, 25 Sep 2014 13:58:45 +0200:

| When you get the CAPTCHA page, does it come with a non-2xx HTTP status code?
| Best regards, Julian

Yes, 403.

--8<---------------cut here---------------start------------->8---
$ curl -v -s -A '' -x socks4a://127.0.0.1:9050/ https://www.ietf.org/ > www.ietf.org.html
* Hostname was NOT found in DNS cache
*   Trying 127.0.0.1...
* SOCKS4 communication to www.ietf.org:443
* SOCKS4a request granted.
* Connected to 127.0.0.1 (127.0.0.1) port 9050 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Server hello (2):
{ [data not shown]
* SSLv3, TLS handshake, CERT (11):
{ [data not shown]
* SSLv3, TLS handshake, Server key exchange (12):
{ [data not shown]
* SSLv3, TLS handshake, Server finished (14):
{ [data not shown]
* SSLv3, TLS handshake, Client key exchange (16):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Finished (20):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
{ [data not shown]
* SSLv3, TLS handshake, Finished (20):
{ [data not shown]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* Server certificate:
*        subject: OU=Domain Control Validated; CN=*.ietf.org
*        start date: 2014-07-25 19:02:22 GMT
*        expire date: 2015-08-11 23:12:50 GMT
*        subjectAltName: www.ietf.org matched
*        issuer: C=US; ST=Arizona; L=Scottsdale; O=Starfield Technologies, Inc.; OU=http://certs.starfieldtech.com/repository/; CN=Starfield Secure Certificate Authority - G2
*        SSL certificate verify ok.
> GET / HTTP/1.1
> Host: www.ietf.org
> Accept: */*
> 
< HTTP/1.1 403 Forbidden
* Server cloudflare-nginx is not blacklisted
< Server: cloudflare-nginx
< Date: Thu, 25 Sep 2014 20:09:34 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: __cfduid=df905f6d4fc2798f596872df7b98498501411675774571; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.ietf.org; HttpOnly
< Cache-Control: max-age=2
< Expires: Thu, 25 Sep 2014 20:09:36 GMT
< CF-RAY: 16f9dc37031e0c23-AMS
< 
{ [data not shown]
* Connection #0 to host www.ietf.org left intact
$ 
--8<---------------cut here---------------end--------------->8---