Там оборудование вроде автоматизировано. РКН выкладывает списки на блок, в течении часа провы забирают их себе. Ревизор это проверяет.
И Марк не блочит Pornhub, там какая то трабла с SSL сертификатом.
quote:
elforcer@elforcerhome:/tmp/testssl.sh$ nmap www.pornpub.com -p443 -sV
Starting Nmap 7.60 ( https://nmap.org ) at 2019-05-17 22:29 +04
Nmap scan report for www.pornpub.com (54.71.255.210)
Host is up (0.21s latency).
rDNS record for 54.71.255.210: ec2-54-71-255-210.us-west-2.compute.amazonaws.com
PORT STATE SERVICE VERSION
443/tcp open ssl/http Apache httpd
quote:
elforcer@elforcerhome:/tmp/testssl.sh$ ./testssl.sh https://www.pornhub.com ###########################################################
testssl.sh 3.0rc5 from https://testssl.sh/dev/
(d6fb232 2019-05-08 23:18:03 -- )
This program is free software. Distribution and
modification under GPLv2 permitted.
USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!
Please file bugs @ https://testssl.sh/bugs/
###########################################################
Using "OpenSSL 1.0.2-chacha (1.0.2k-dev)" [~183 ciphers]
on elforcerhome:./bin/openssl.Linux.x86_64
(built: "Jan 18 17:12:17 2019", platform: "linux-x86_64")
Start 2019-05-17 22:22:46 --;; 66.254.114.41:443 (www.pornhub.com ) ;;--
rDNS (66.254.114.41): --
66.254.114.41:443 doesn't seem to be a TLS/SSL enabled server
The results might look ok but they could be nonsense. Really proceed ? ("yes" to continue) --; yes
Service detected: Couldn't determine what's running on port 443, assuming no HTTP service =; skipping all HTTP checks
Testing protocols via sockets except NPN+ALPN
SSLv2 not offered (OK)
SSLv3 not offered (OK)
TLS 1 not offered
TLS 1.1 not offered
TLS 1.2 not offered
TLS 1.3 not offered
quote:
--2019-05-17 21:57:21-- https://www.pornhub.com/
Распознаётся www.pornhub.com (www.pornhub.com)… 66.254.114.41
Подключение к www.pornhub.com (www.pornhub.com ) | 66.254.114.41 | :443... соединение установлено.
OpenSSL: error:14094419:SSL routines:ssl3_read_bytes:tlsv1 alert access denied
Не удаётся установить SSL-соединение.
quote:
elforcer@elforcerhome:/tmp$ traceroute www.pornhub.com
traceroute to www.pornhub.com (66.254.114.41), 30 hops max, 60 byte packets
1 _gateway (192.168.0.1) 0.249 ms 0.232 ms 0.220 ms
2 Izhevsk25.MARK-ITT.net (217.14.207.25) 0.751 ms 0.774 ms 0.781 ms
3 izhevsk21.mark-itt.net (217.14.192.21) 1.276 ms 1.166 ms 1.537 ms
4 izhevsk206.mark-itt.net (217.14.199.26) 1.466 ms 1.889 ms 1.865 ms
5 198.51.100.233 (198.51.100.233) 39.934 ms 39.965 ms 39.924 ms
6 block.rkn.gov.ru (193.233.158.1) 41.383 ms 36.490 ms 36.467 ms
7 185.199.160.25 (185.199.160.25) 32.621 ms 33.116 ms 33.103 ms
8 185.199.160.10 (185.199.160.10) 33.420 ms * 33.329 ms
9 185.199.160.1 (185.199.160.1) 33.374 ms 33.323 ms 33.204 ms
10 37-139-32-73.customer.comfortel.pro (37.139.32.73) 33.386 ms 33.374 ms 33.379 ms
11 80.64.103.14 (80.64.103.14) 34.207 ms 34.256 ms 33.544 ms
12 * * *
13 be4338.204.ccr21.sto01.atlas.cogentco.com (149.6.168.137) 45.239 ms 45.243 ms 45.225 ms
14 be3377.ccr22.sto03.atlas.cogentco.com (154.54.36.89) 45.550 ms 45.602 ms be3376.ccr21.sto03.atlas.cogentco.com (130.117.50.225) 47.783 ms
15 be2281.ccr41.ham01.atlas.cogentco.com (154.54.63.1) 68.846 ms be2282.ccr42.ham01.atlas.cogentco.com (154.54.72.105) 60.964 ms 62.424 ms
16 be2815.ccr41.ams03.atlas.cogentco.com (154.54.38.205) 72.652 ms 72.640 ms 72.609 ms
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
elforcer@elforcerhome:/tmp$
В общем по какой то причине режется протокол TLS.
история редактирования
