Hi,

I had a couple of people mention they were getting an error trying to access a link I posted in c/fountainpens. One of the users (@gemelen@mammut.moe) created a traffic dump of trying to access the link using curl. He posted his results on this Opensuse paste bin.

He added this:

I guess Cloudflare prevents some web clients (like embedded viewer for a Mastodon mobile app) and some networks (like mine Uruguayan Internet provider) - I could open the feddit.online and see your post there in a desktop browser, but being forbidden to access from a mobile or via curl.

George

  • gemelen@mammut.moe
    1·
    3 个月前

    @Jerry
    To clear this out: curl _may_ work even in that particular case with a provided user-agent and other things, if necessary. But the most importantly, it demonstrated that the Cloudflare is in front of your resource.

    Originally, the URL that was shared by @Unattributed is “https://feddit.online/c/fountainpens/p/1803832/why-fountain-pens”, so it was attempted to visit from the mobile (either Tusky or Pachli app - Mastodon clients for Android, and from mobile Vivaldi).
    Thus I (and accidentally other person) replied that it’s unreachable through these methods. On the other hand, it could be opened from a desktop browser (desktop version of Vivaldi specifically).

    Where that URL came? Likely, copied from the browser’s address bar, I would assume. But that’s a question to @Unattributed

    • Jerry on PieFed@feddit.onlineMEnglish
      1·
      3 个月前

      Yes, Cloudflare has tools to detect bot traffic, which include curl and similar utilities. It absolutely stands in front of the server.

      But if the correct URL cannot be opened by a mobile client, then there’s a problem. Then I’d need the details.

      The firewall is trying to only allow traffic from either web browsers, other ActivityPub servers, or mobile applications. It’s designed to block traffic from anywhere else.