Google
 

PDA

View Full Interactive Version Of This Page : Frantz site blocked again


Ekkie
2010-02-26, 4:33pm
I keep getting blocked from the Frantz site. Mike has it fixed and next time I try to access the site I'm blocked again. I have tried a different search engine as suggested - access is still blocked. This is extremely frustrating as I know other international customers are not blocked - hey! I'm innocent. Any chance of getting a firewall that can recognise friendly customers, with accounts, who just want to spend their money.

squid
2010-02-26, 4:37pm
Have you tried spoofing your IP addy to one in the US? that might make it "see" you.

Kym
2010-02-26, 4:50pm
I have never had any problems getting into Frantz's....Its beyond me why you would be. Do you know if anyone else in OZ is having the same problems because I would be thinking it something to do with your security settings or something if not.
You could try setting up a new account with Frantz?

Kym



I keep getting blocked from the Frantz site. Mike has it fixed and next time I try to access the site I'm blocked again. I have tried a different search engine as suggested - access is still blocked. This is extremely frustrating as I know other international customers are not blocked - hey! I'm innocent. Any chance of getting a firewall that can recognise friendly customers, with accounts, who just want to spend their money.

Ekkie
2010-02-26, 5:59pm
I didn't post here as any reflection on Frantz - I think they are great. This was the only way I thought had of letting them know that this is happening. I forgot that I could probably send a pm to them as an LE member.

I was told that it was to do with international spammers attacking the Frantz site and their new security system/firewall. My security settings haven't changed and this only started happening in late Jan early Feb. It also affects any sites that link back to Frantz such as Flamedame.

PaulaD
2010-02-26, 6:52pm
Jenn my site is not linked to Frantz Art Glass. When Mike went to Zen Cart he used the same company that I was already with and since we are both companies beginning with F we are on the same server. So when one of us is down the other usually is too. But the sites aren't linked. And I am getting overseas orders ok.

mikefrantz
2010-02-26, 7:15pm
Sorry, I have no clue,my expertise is not computers and firewalls. I know we have been putting three new servers and new firewalls into place over the past few weeks, but whether it is all connected to your problem...no clue.

Another problem to work on next week, but for now.....just got back from dinner at Xinh's then off to Little Creek Casino to see the Two Joy boys.....Cheech and Chong!

Third row center. The first two rows are saved for the tribe. The early worm catches the worm is true with concert seats......all you got to do is show up when they go up for sale. Not like when I was a young one and would travel to L.A. for the line to see groups lite The Stones or Queen, where there can be thousands waiting. For Cheech and Chong, there was two people in front of me. Just ten minutes down the road..........small towns do have some advantages over larger cities, but then again, the Stones do not come to Shelton!

Have a nice weekend..........anybody want to play ball with me?

Mike

Ekkie
2010-02-28, 4:08am
It's all a riddle to me. I just want to buy glass. I try to buy from Aussie suppliers wherever possible but they just don't carry everything that I want so sometimes I buy from US suppliers.

Sorry Paula. I thought you must be linked because every time I click on enlarge picture on your site I get blocked and the same message appears.

beadsoncypress
2010-02-28, 8:29am
try ABR, Moretti & More or some of the other sellers!

PaulaD
2010-02-28, 12:02pm
Jenn I don't know if you saw my last message to you here sent via pm. My web guy was working on it and he had some more questions. He did suggest that you try a different browser and clear our your coookies and all of that stuff. Everyone else from Australia is getting in.
The reason that some overseas people got blocked out was that our web hosts were under attack by overseas robots trying to get into websites and crash them. That was slowing down the websites too so they blocked overseas ip's for awhile to stop it. The work that goes on behind the scenes sometimes is pretty incredible and our hosting company does a great job considering the evil that is out there. No websites are really safe from this. Our Company is Camelot-Hosting in case any one wants to know.

khammil
2010-02-28, 12:41pm
It's an issue with Frantz's Web host, Camelot Hosting. It's happened to me often and I called Camelot a couple of times. They looked up my IP address and it had, indeed, been temporarily blocked because their security software thought it had detected port scanning originating from my computer. The block expires after an hour but happens again and again at random times.

I am positive that my computer is not at fault. I work in software security, I've scanned my computers a bunch of times (and my company's IT department does it for me, too). If there were malware on my computer it would have been detected long before now. Also, this happens nowhere else on the Internet.

A couple of other data points: this happens with computers running Windows, never with my Macs. It happens from different physical locations, so it's not a property of my home or work networks. It doesn't matter what browser I'm using and clearing cookies makes no difference. My guess is that Camelot's software firewall is reacting badly to some idiosyncrasy in Windows' implementation of networking protocols. Whatever it is surprises Camelot's software but is not actually a security threat.

When I tried to dig in with Camelot they were dismissive and fed me a line of BS using technical terms that actually didn't mean anything. So, Camelot has a bug in their security scanning software and they were not interested in investigating further. I've resigned myself to only being able to shop at Frantz when I'm using a Mac.

If I were running my own business I would not employ a Web host who shuts my legitimate customers out regularly and has no inclination to figure out the root cause of the problem. I would also not use a Web host whose solution to security threats is to block ALL overseas IP addresses, even temporarily. Any reasonably capable hacker can get around an IP block via spoofing. The fact that Camelot implemented a blanket IP block shows that not only do they not blink at creating a terrible experience for end-users, they also don't know that much about security. I wouldn't trust that they're doing everything they need to behind the scenes to prevent a legitimate exploit from affecting users.

Ekkie
2010-02-28, 1:29pm
Thanks for the information Kerry. At least I know that it's not just me. I have followed all the same procedures as you so also came to the conclusion that it is a problem with Camelot.

PaulaD
2010-02-28, 2:00pm
Kerry they did a blanket block in response to an overseas attack that could have taken down all of our websites. They did explain it to me but my understanding of all this stuff is on the low end. Maybe they were busy when you called and didn't want to go into details. Camelot has done a great job for me for years and I am not going to diss them for one thing that didn't go perfectly. They are available all the time even the middle of the night.

Reenie
2010-02-28, 2:48pm
Well if anyone wants a hosting company that has never given me troubles or is there 24/7 try To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts.
They have always been fantastic and my website has not once been down in all the years I've had them....My family had another business that was shop and web based.
They are inexpensive too! Something like $5.95 a month if you pay a year in advance to $7.95 if you pay monthly:-)
Just a plug for them.

Douglas
2010-02-28, 4:09pm
Hi Jenn,
I just tried Mike's site and it works fine for me.
Regards, Wendy

Ekkie
2010-02-28, 4:55pm
Thanks Wendy. Still no joy for me.

khammil
2010-02-28, 8:06pm
Is trying from a different computer at a library or a friend's house an option, Ekkie? Unfortunately with this particular problem, even if you get the temporary block removed, whatever is causing it will make it appear again. If trying from another computer isn't an option, see if Camelot is willing to look into a more permanent fix. If they can't make it work I would definitely let Mike know, as he will care about something that is making it hard for customers enjoy his wonderful store.

camelothosting
2010-03-01, 12:23pm
It's an issue with Frantz's Web host, Camelot Hosting. It's happened to me often and I called Camelot a couple of times. They looked up my IP address and it had, indeed, been temporarily blocked because their security software thought it had detected port scanning originating from my computer. The block expires after an hour but happens again and again at random times.

I am positive that my computer is not at fault. I work in software security, I've scanned my computers a bunch of times (and my company's IT department does it for me, too). If there were malware on my computer it would have been detected long before now. Also, this happens nowhere else on the Internet.

A couple of other data points: this happens with computers running Windows, never with my Macs. It happens from different physical locations, so it's not a property of my home or work networks. It doesn't matter what browser I'm using and clearing cookies makes no difference. My guess is that Camelot's software firewall is reacting badly to some idiosyncrasy in Windows' implementation of networking protocols. Whatever it is surprises Camelot's software but is not actually a security threat.

When I tried to dig in with Camelot they were dismissive and fed me a line of BS using technical terms that actually didn't mean anything. So, Camelot has a bug in their security scanning software and they were not interested in investigating further. I've resigned myself to only being able to shop at Frantz when I'm using a Mac.

If I were running my own business I would not employ a Web host who shuts my legitimate customers out regularly and has no inclination to figure out the root cause of the problem. I would also not use a Web host whose solution to security threats is to block ALL overseas IP addresses, even temporarily. Any reasonably capable hacker can get around an IP block via spoofing. The fact that Camelot implemented a blanket IP block shows that not only do they not blink at creating a terrible experience for end-users, they also don't know that much about security. I wouldn't trust that they're doing everything they need to behind the scenes to prevent a legitimate exploit from affecting users.
I would like to address a few points.

First I would like to apologize to the folks that have in fact had their IP blocked, Should this happen if you send us a ticket ( support@ camelot-hosting com ) then we will take care of the block and it helps us determin the cause of the block,

as to this post in general we have NEVER tried to dismiss, as a matter of fact we actually sent you the logs for the port scan it showed the begining and ending IPS and ports ( showed what port on your Windows PC was scanning from and what port it was trying to get into )
I apologize that I do not have those logs available however we are going to start keeping these particular logs longer


Since we have clients from all over the world and I mean that literally blocking overseas IPS would not make any sense... Im not sure where Paula got that but I will go back over our tickets and see if I said anything that might have been misunderstood...

As for Blocks, there are several reasons for these
1 is simple port scanning, and can be done quite innocently. but the server sees your PC looking to see if there are open ports so it protects itself as well as the clients on the server.

2 Is bad code ( dont see that as an issue here )

In the future any blocks that we are notified of we will send a detailed response as to why you were blocked and if it is indeed a port scan we will attach a report that shows what where when and how with explinations for each part

CarolS
2010-03-01, 12:50pm
This is something that has me extremely frustrated as well. I get booted off of the ISGB website, Paula's website and now Frantz's I imagine. I tried communicating 3rd party with ISGB's web person but got no resolution. My computer has been scanned from here to kingdom come for viruses and spy software and shows that I am clean. I have the latest updates for both.

I'm really sorry to say that I have resorted to only buying glass from websites I can access and Camelot hosting is the only host I have had this issue with.

Elegance_1
2010-03-01, 12:53pm
I would like to address a few points.

First I would like to apologize to the folks that have in fact had their IP blocked, Should this happen if you send us a ticket ( support@ camelot-hosting com ) then we will take care of the block and it helps us determin the cause of the block,

as to this post in general we have NEVER tried to dismiss, as a matter of fact we actually sent you the logs for the port scan it showed the begining and ending IPS and ports ( showed what port on your Windows PC was scanning from and what port it was trying to get into )
I apologize that I do not have those logs available however we are going to start keeping these particular logs longer


Since we have clients from all over the world and I mean that literally blocking overseas IPS would not make any sense... Im not sure where Paula got that but I will go back over our tickets and see if I said anything that might have been misunderstood...

As for Blocks, there are several reasons for these
1 is simple port scanning, and can be done quite innocently. but the server sees your PC looking to see if there are open ports so it protects itself as well as the clients on the server.

2 Is bad code ( dont see that as an issue here )

In the future any blocks that we are notified of we will send a detailed response as to why you were blocked and if it is indeed a port scan we will attach a report that shows what where when and how with explinations for each part

Information is all well and good but will you be able to unblock them and keep them unblocked so they can access Frantz and FlameDame??

camelothosting
2010-03-01, 12:54pm
and have you sent us an email to support @
showing what the IP address was?

If you dont do this we cant find what the cause is.

camelothosting
2010-03-01, 12:56pm
Information is all well and good but will you be able to unblock them and keep them unblocked so they can access Frantz and FlameDame??
The idea is to figure out WHY they are blocked, and go from there,

Its weird how its a camelot issue when many other users have not had this issue, and above its only with a windows PC

If we were just blocking IPS it wouldnt matter if it was a PC or a MAC the IP would be blocked....

I want to get to the bottom of this as much and more than you folks do trust me

CarolS
2010-03-01, 12:58pm
and have you sent us an email to support @
showing what the IP address was?

If you dont do this we cant find what the cause is.

I didn't communicate with you directly. The ISGB web person sent you my IP address and then relayed that apparently there was something coming from my computer that was trying to access the background of the ISGB's website. There was no solution offered other than I may have a virus. According to my antivirus software, I'm clean, so I have no clue as to what the problem is. Any help you can offer would be appreciated to get this resolved.

ETA: I will send an e-mail directly!:)

PaulaD
2010-03-01, 1:12pm
I just want to but in and say that I am very happy with Camelot hostiing. I don't know anything about computers and Mike is ALWAYS helpful! If someone has an unresolved issue he sticks with it until he gets it fixed!
Paula

khammil
2010-03-01, 2:07pm
Thanks for your response and attention to this issue, camelothosting. I can verify that the blocks are IP blocks, because I see the block on my Mac (which never provokes the block itself) if I try to access Frantz right after getting blocked on one of my Windows machines. Also, changing locations (work<->home) using the same machine gets around the block.

I've not successfully received a log from Camelot, but the next time I run into this issue I'll get in touch with you and see if the log can tell me anything unusual my computer might be doing.

PaulaD
2010-03-01, 2:36pm
E-commerce may have it's bumps but it sure beats the old fashioned way!!

camelothosting
2010-03-01, 9:13pm
Ok just a little update,
before that a thank you to CarolS for helping us this far.

Ok back to the update.
We have been able to show that its not a "Server" Issue ( still working on it though ) since visiting other sites on the same server are not causing the same issues ( the sites we tested with are e-commerce sites using the same software as those above )

we have tested with a brand new version of ZC and a slithgly modded version of ZC and had no issues.....

at this point we are looking into possible script errors. This is going to be a slow process but we are still after it.....

Khammil do you think you could visit both frantz and flamedame and see if you are triggering the errors ( Please use your PC ) and if you do get locked out please send an email to support@ besides the IP thats blocked, If you could put in what you were clicking on as well as windows version browser type and version

khammil
2010-03-01, 9:18pm
Sure thing, camelothosting - I'll try it this evening and e-mail you if I successfully repro the issue.

khammil
2010-03-01, 9:30pm
Camelothosting, I was able to repro the problem with both Frantz and Flamedame's sites. I sent the details to To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts.. Please let me know if there is more information I can provide that would assist in tracking down the root cause.

camelothosting
2010-03-01, 10:00pm
I have replied back and givin a detailed ( I hope so anyway ) explination of why your IP was blocked.
It was in fact port scanning and I listed the ports being sent from and too

You may want to actually close the port in question in your firewall.

Since the port that your trying to access is not a needed port for our services so we have closed it.

CarolS
2010-03-01, 10:22pm
Hey, you're welcome! Thanks for spending the time and effort to chase this down and fix it.:)

Ok just a little update,
before that a thank you to CarolS for helping us this far.

Ok back to the update.
We have been able to show that its not a "Server" Issue ( still working on it though ) since visiting other sites on the same server are not causing the same issues ( the sites we tested with are e-commerce sites using the same software as those above )

we have tested with a brand new version of ZC and a slithgly modded version of ZC and had no issues.....

at this point we are looking into possible script errors. This is going to be a slow process but we are still after it.....

Khammil do you think you could visit both frantz and flamedame and see if you are triggering the errors ( Please use your PC ) and if you do get locked out please send an email to support@ besides the IP thats blocked, If you could put in what you were clicking on as well as windows version browser type and version

khammil
2010-03-01, 10:47pm
Hi camelothosting, your report says that you blocked my laptop because it pinged port 500. That's the standard port that Windows machines use to initiate IPSec (To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts.) connections. It's not a threat, it's a query to see whether a Web site supports a more secure type of connection. If a site supports IPSec connections, Windows will go with that for maximum security. If not, Windows will stick with the standard http or To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts. connection.

You advised me to block port 500 on my software firewall, but I can't do that or else I would not be able to connect to my work network. I believe your firewall is interpreting the Windows IPSec protocol negotiation as a threat. Could you look into whether you can de-sensitize the firewall so that it doesn't react to IPSec queries? I agree that if you receive inbound probes on many ports you should block the client for port scanning. A single ping on a security connection port should not trigger the block though.

Thanks,
Kerry

camelothosting
2010-03-01, 11:17pm
Yes we know what port 500 is for, and the fact that we run almost exclusively e-commerce sites we will not open any port that does not need to be open.
Yes the firewall is seeing the ping as an attack because its pinging not once but a minimum of 5 times before you are getting a temp block.
I only grabbed one line from the report, I apologize for not stating that in my reply.

If it only pinged once or twice then it would not be an issue.

khammil
2010-03-01, 11:29pm
Interesting, it was after 5 clicks on Flamedame's site that I saw the block. Windows must be sending out one IPSec negotiation request per click.

Since you're not implementing IPSec you're doing the right thing by not opening port 500. However, your firewall is blocking many Windows computers that are not infected with malware. Can you modify it so that it doesn't trigger a block unless someone pings a port (other than 80, the standard HTML port) more than once a second? That would catch pretty much every exploit I've ever seen in the wild, as malware typically scans ports quickly and repeatedly. Regular, nonthreatening behavior like clicking on a new page every few seconds would not trigger the block then.

-- K

camelothosting
2010-03-01, 11:38pm
I am using a windows PC and have never been blocked for this,
Honestly your the first one I remember getting hit on port 500....
As to the speed of exploits, Yes they are usually fast however there are a few that are actually going slow to get around the clicks per second

khammil
2010-03-01, 11:57pm
Many other customers on Lampwork Etc. have been denied from shopping at sites that use Camelot Hosting. It's been an issue for a long time and this thread is the most recent manifestation.

Have you tested extensively with Windows 7? Have you investigated the logs of the other people in this thread who have been denied?

PaulaD
2010-03-02, 12:03am
I have not heard of other people being blocked and we have not had a problem until now. eta And just 2 people are blocked.

camelothosting
2010-03-02, 6:18am
Yes I use windows 7 ( 64 bit at that )
The other issues that I have seen are not port scanning they are usually mod sec rules that happen to a few sites and we are working on finding whats triggering them, since we can demonstrate that its not a "Server" Issue we are looking into Code issues.

Once again if the ping to port 500 happened only once wouldnt be an issue.
You sated in your very good description above that it tries it and if it cant find it it reverts back to standard connections....
The question then becomes why is your setup not reverting, why is it pinging on every page hit?
We are willing to work to resolve any issues however there needs to be troubleshooting on both sides.

khammil
2010-03-02, 12:19pm
The best information I can get says that Windows re-checks for IPSec support every time a new connection is created with a site (i.e. by a user clicking a link). It's regularly checking for IPSec support in case it becomes available midsession. This is apparently standard behavior for Windows computers that are running IPSec. You would not want to open port 500, but a ping to it every 1-2 seconds is not necessarily due to a threat.

Some more information that would help me troubleshoot whether there is anything wrong on my side:

1) Is port 500 the only port you saw my computer probing?
2) How frequent were the ~5 hits on port 500 and on any other ports I scanned?

camelothosting
2010-03-02, 12:37pm
you were caught scanning port 500 6 times before you were booted
there were 2 at each of the following
Mar 1 23:25:17
Mar 1 23:25:37
Mar 1 23:25:39

Once again you are the ONLY person that is having THIS issue as I said before most are not port scans but mod sec rules that we are still trying to iron out

If this was a typical issue then no windows users would be able to view any of our servers.
I have tested this in windows XP Vista ( 32 and 64 bit ) and widows 7 in 32 and 64 bit with no issues. ( I removed my Ip from the white list before my tests so that wouldnt have been a factor ) I believe Mike may have been on to something in the ticket he replied to about your settings being different due to the VPN connection that you are using.

Ekkie
2010-03-02, 1:53pm
Kerry is not the only person having this issue - I started the thread. As I had no idea at the time whether the message from Camelot Hosting was genuine I contacted the vendors from whose sites I was blocked.

I'm glad to see that you are investigating the issue. However, you should be able to provide access for customers who have accounts with vendors rather than suggesting that the customer is to blame.

I have just now contacted Camelot-Hosting Support with the details.

camelothosting
2010-03-02, 2:04pm
If you look back through my posts we are in fact trying to fix the issue,
and we are NOT blaming the issue on anyone.

I see you put in a ticket can you tell me when you were blocked since we do not have a record of the WHY

I will unblock from flamedames site rignt now and if you get blocked again then please update your ticket and we can tehn see what your issue is

PaulaD
2010-03-02, 2:17pm
Jenn I think your issue might be different than Kerri's. And I did send on your info to them already.

Ekkie
2010-03-02, 3:19pm
Thanks Paula. I contacted Camelot today and their response was immediate - the problem with Frantz seems to be solved -I managed to place an order.

I still getted blocked from your site as soon as I try to open a product link which then reinstates the block on Frantz so I guess I will have to wait a bit longer to spend some money at Flamedame.

khammil
2010-03-03, 2:23am
Hi, Camelothosting, I'm not connecting to any sites hosted on your servers via a VPN. I have connected from multiple physical locations, including my home network, work network, and networks at friends' houses. This has happened with different Windows computers (never my Macs or Linux machines). All of these Windows computers have a few things in common, though, including running Microsoft Forefront anti-malware software. I wonder if some program that is part of my work network's standard security suite is triggering this issue?

In any case, I am not the only person who has run into this problem. A couple of other people on this forum have reported it to Camelot Hosting support. Most people give up quickly because they don't get past the initial rebuff. If I weren't working in computer security, I would not have had the familiarity to dig in further either.

I would like to help find the root cause of the issue and to help implement any client-side changes which might be necessary. I have a few questions about the server-side activity that Camelot Hosting has see, which might help to diagnose the issue:

1) Am I the only client that you see scanning port 500, and which is subsequently blocked for port scanning? If I'm the only one, I'd love to know as that would indicate I need to look more closely at my Windows machines.

2) Is my client scanning ports other than 500?

3) What is the frequency of scans you see from my clients against all ports?

This is not an issue with all Windows computers, but it is an issue that happens frequently. Several people have posted on this forum about not being able to access sites hosted by Cametot Hosting. I've also heard anecdotal reports of similar problems at nearby classes and lampworking meetings. This is preventing more people from accessing Frantz and Flamedame than might immediately be apparent.

I would like to help figure out the root cause of this issue, which does not occur for me on sites hosted anywhere else and which is unlikely to be the result of a security compromise on any of my Windows computers which have been extensively scanned for malware.

-- K

Janelle Zorko
2010-03-03, 6:41am
I would like to thank the users for opening up this dialog and Camelot for joining in. As some of you know, I am the webmaster for several sites on Camelot. You can blame me for the choice of this host in a lot of cases. Camelot specializes in hosting ZenCart and as such, they are the most security minded and communicative web host I've ever used. They have a great reputation despite these recent issues and I know that Tony and Mike are working hard on this. We have talked on numerous occasions but without this kind of feedback, it's hard to fix any type of software problems.

Thanks again - I'll keep working with Camelot and the sites at which you may have problems and never hesitate to contact me (although I do publicly apologize that I wasn't able to get Carol S the help that she needed). I've been very frustrated by the situation but it seems like we might find some resolution.

Janelle

CarolS
2010-03-03, 12:28pm
I would like to thank the users for opening up this dialog and Camelot for joining in. As some of you know, I am the webmaster for several sites on Camelot. You can blame me for the choice of this host in a lot of cases. Camelot specializes in hosting ZenCart and as such, they are the most security minded and communicative web host I've ever used. They have a great reputation despite these recent issues and I know that Tony and Mike are working hard on this. We have talked on numerous occasions but without this kind of feedback, it's hard to fix any type of software problems.

Thanks again - I'll keep working with Camelot and the sites at which you may have problems and never hesitate to contact me (although I do publicly apologize that I wasn't able to get Carol S the help that she needed). I've been very frustrated by the situation but it seems like we might find some resolution.

Janelle

Janelle, please don't think I was upset with you - you are a sweetheart and really willing to help. From my understanding, you took it as far as you could. It is a totally frustrating situation for all involved and now that I have contacted Camelot directly, Mike and his staff have been very responsive.

camelothosting
2010-03-03, 1:32pm
Hi, Camelothosting, I'm not connecting to any sites hosted on your servers via a VPN. I have connected from multiple physical locations, including my home network, work network, and networks at friends' houses. This has happened with different Windows computers (never my Macs or Linux machines). All of these Windows computers have a few things in common, though, including running Microsoft Forefront anti-malware software. I wonder if some program that is part of my work network's standard security suite is triggering this issue?

In any case, I am not the only person who has run into this problem. A couple of other people on this forum have reported it to Camelot Hosting support. Most people give up quickly because they don't get past the initial rebuff. If I weren't working in computer security, I would not have had the familiarity to dig in further either.

I would like to help find the root cause of the issue and to help implement any client-side changes which might be necessary. I have a few questions about the server-side activity that Camelot Hosting has see, which might help to diagnose the issue:

1) Am I the only client that you see scanning port 500, and which is subsequently blocked for port scanning? If I'm the only one, I'd love to know as that would indicate I need to look more closely at my Windows machines.

2) Is my client scanning ports other than 500?

3) What is the frequency of scans you see from my clients against all ports?

This is not an issue with all Windows computers, but it is an issue that happens frequently. Several people have posted on this forum about not being able to access sites hosted by Cametot Hosting. I've also heard anecdotal reports of similar problems at nearby classes and lampworking meetings. This is preventing more people from accessing Frantz and Flamedame than might immediately be apparent.

I would like to help figure out the root cause of this issue, which does not occur for me on sites hosted anywhere else and which is unlikely to be the result of a security compromise on any of my Windows computers which have been extensively scanned for malware.

-- K

As I replied earlier you are in fact the only person having issues with port 500 scanning,

No your not scanning any ports besides 500
and Im going to say this kinda blunt this time

YOURS IS THE ONLY ONE WITH PORT 500 ISSUES....
I have tested ( as I explained to you yesterday ) with multiple versions of windows ( XP Vista 32 and 64 bit as well as windows 7 32 and 64 bit ) and have NOT been able to produce this port 500 issue,

The only thing we have been able to come up with is that there is an issue with your firewall or PC that is trying to connect to port 500 more than is required. the time stamps that I showed you yesterday show that you were attempting to connect top port 500 2 x a second on 3 diff occasions

and once again the issues that others here are having are NOT the same as yours,

camelothosting
2010-03-03, 1:46pm
Ok time to ask a totally seperate but relevant question

Other than Khammil.

Has anyone ever actually been blocked while they were in frantz? or did you go there after visiting another site and just got the blocked page to start.

camelothosting
2010-03-03, 2:04pm
On a separate note can any who were locked out at flamedame hit this link and click around, To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts.

camelothosting
2010-03-03, 3:30pm
Ok to let people know we are working on a tweak that will solve the users having mod security issues ( thats just about everyone thats had issues with these sites )

Ekkie
2010-03-03, 4:38pm
Clicked on the flamedame link above with the following result:

Your connection to this server has been blocked in the firewall.
You need to contact Camelot-Hosting Support with the following IP address.

Your blocked IP address is ......

Addressing the other questions:
I was first blocked while using Frantz website
I was then blocked while using Flamedame site
Regained access to the Frantz site and managed to place an order but have since been blocked again from both sites after accessing the Flamedame site.

I hope this sequence of events is of some help.

camelothosting
2010-03-03, 6:42pm
Yes this is very helpful,

I will need you to send me your IP again so we can unblock you and have you test again we are sure that we have the issue at franz and flame dame taken care of

PaulaD
2010-03-03, 7:32pm
On a separate note can any who were locked out at flamedame hit this link and click around, To view links or images in this forum your post count must be 1 or greater. You currently have 0 posts.

I just clicked it and all I got was Google...

PaulaD
2010-03-03, 7:33pm
Jenn if you wanted to buy things that were on sale last week just let me know. After he fixes the bug. Paula

camelothosting
2010-03-03, 9:07pm
I removed the test site, Looks like we have your site and frantz all taken care of.

PaulaD
2010-03-03, 9:47pm
Yay!!! Thanks Mike!!

mikefrantz
2010-03-04, 9:47pm
I removed the test site, Looks like we have your site and frantz all taken care of.

Thank You Very Much :)

mike frantz

Ekkie
2010-03-04, 10:31pm
Thanks everyone. Everything is working fine again for me on both sites.