Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 MCMC/SKMM DNS Blocks - CDNs Affected

views
     
TSAAY
post Dec 24 2021, 11:03 PM, updated 4y ago

Casual
***
Junior Member
431 posts

Joined: Jan 2003
Is anyone else annoyed that a bunch of CDNs getting blocked by MCMC/SKMM?

I first noticed this last month - I was wondering why a website I visited wasn't loading correctly. It turns out that this site was using a bootstrap template from MaxCDN, and the DNS response for that host was unkindly coerced at the bidding of our dear regulators.

Try it yourself (if you're using a Malaysian ISP's DNS server): maxcdn.bootstrapcdn.com will resolve to 175.139.142.25. If you're using Maxis, you will helpfully see that it resolves to a CNAME of mcmc-redirect.maxis.com.my. If you're not using Maxis you won't see the helpful CNAME and will be wondering for a while why you can't seem to hit that address...

More recently I also found another DNS record that is coerced - polyfill.io (some sites that try to maintain compatibility with browsers that should have stayed dead years ago will still point here...). I saw another thread that also mentioned this from October.

Of course the obvious solution to this is to just not use your ISP's DNS servers, and use an alternative such as Google DNS, Quad9, CloudFlare, etc. I usually use an alternative DNS server but it's not a solution that the typical consumer would know about.

I did try to submit a complaint to MCMC (for the first host), but their complaint form (which is extremely regimented!) doesn't have a category for this sort of complaint so I had to pick the most similar category from the list. Remarkably it got partially unblocked (IPv6 addresses were OK on Maxis, but IPv4 wasn't. TM just returned the bad IPv4 address) the very next day. And then of course the day after that everything went back to normal..ugh.

To try to put a point to this topic, here's a question for everyone/anyone: Has anyone succeeded in getting MCMC/SKMM to unblock a mistakenly blocked site, and if so how did you do it?

This post has been edited by AAY: Dec 25 2021, 10:26 AM
Oltromen Ripot
post Dec 25 2021, 09:15 AM

👍 999999 person Likes this member
*******
Senior Member
4,034 posts

Joined: Dec 2019
maxcdn.boostrapcdn.com
sure that is not a typo?

maxcdn.bootstrapcdn.com




/me not web developer, just passing by
TSAAY
post Dec 25 2021, 10:12 AM

Casual
***
Junior Member
431 posts

Joined: Jan 2003
QUOTE(Oltromen Ripot @ Dec 25 2021, 09:15 AM)
maxcdn.boostrapcdn.com
sure that is not a typo?

maxcdn.bootstrapcdn.com
/me not web developer, just passing by
*
Whoops, that was a typo. I've fixed the original post. The typo'd domain (boostrapcdn.com) does resolve, but there's nothing of value there...
Oltromen Ripot
post Dec 25 2021, 10:23 AM

👍 999999 person Likes this member
*******
Senior Member
4,034 posts

Joined: Dec 2019
QUOTE(AAY @ Dec 24 2021, 11:03 PM)
maxcdn.bootsrapcdn.com
*
user posted image



if, and if, you REALLY mean maxcdn.bootsrapcdn.com, then they probably got major hijack until ISP had to step in to protect large number of users.

This post has been edited by Oltromen Ripot: Dec 25 2021, 10:28 AM
PRSXFENG
post Dec 25 2021, 10:58 AM

Look at all my stars!!
*******
Senior Member
2,616 posts

Joined: Nov 2020


Hmm the true maxcdn.bootstrapcdn.com resolves to 104.18.10.207 for me, using Quad9 with ECS and does indeed resolve to mcmc-redirect.maxis.com.my if I use Maxis DNS

Wonder if it's yet another accidental block like last time TM blocking off a chunk of Cloudflare cause they didn't realize a site was on Cloudflare and blocked Cloudflare's anycast address while attempting to block said site...

This post has been edited by PRSXFENG: Dec 25 2021, 10:59 AM
Cincai.La
post Dec 25 2021, 02:58 PM

Getting Started
**
Junior Member
184 posts

Joined: Jun 2020
From: IPOH


City Broadband DNS Server

user posted image
TSAAY
post Dec 25 2021, 03:13 PM

Casual
***
Junior Member
431 posts

Joined: Jan 2003
QUOTE(PRSXFENG @ Dec 25 2021, 10:58 AM)
Hmm the true maxcdn.bootstrapcdn.com resolves to 104.18.10.207 for me, using Quad9 with ECS and does indeed resolve to mcmc-redirect.maxis.com.my if I use Maxis DNS

Wonder if it's yet another accidental block like last time TM blocking off a chunk of Cloudflare cause they didn't realize a site was on Cloudflare and blocked Cloudflare's anycast address while attempting to block said site...
*
I have no idea what happens within the machinery of MCMC... It just seems very strange to block such an innocuous site - one would think that there would be some sort of vetting process that they perform before adding sites to the list, or at least an appeals/review process for actual mistakes.

It makes it doubly weird that they blocked polyfill.io as well.

QUOTE(Cincai.La @ Dec 25 2021, 02:58 PM)
City Broadband DNS Server

user posted image
*
Huh, so maybe City Broadband doesn't honour MCMC's block list? Are you able to get a response back for sites that are definitely banned such as bet365<dot>com?
Cincai.La
post Dec 25 2021, 09:03 PM

Getting Started
**
Junior Member
184 posts

Joined: Jun 2020
From: IPOH


QUOTE(AAY @ Dec 25 2021, 03:13 PM)
Huh, so maybe City Broadband doesn't honour MCMC's block list? Are you able to get a response back for sites that are definitely banned such as bet365<dot>com?
*
Can get response.

user posted image

 

Change to:
| Lo-Fi Version
0.0169sec    0.57    5 queries    GZIP Disabled
Time is now: 24th December 2025 - 09:06 PM