2

I co-own a charity forum that gives support to people in crisis (mental health, self harm, suicidal thoughts etc) Our webmaster left in a bit of a snit a month and a half ago and I have been struggling since. This morning suddenly some of my members (not even most, just a portion) are getting an error on the site.

Some IPs are getting the message:

"Your connection is not private Attackers might be trying to steal your information from suicideforum.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID"

And depending on the browser also getting a "403 Forbidden You don't have permission to access / on this server." error.

When those members access the site via a proxy, everything is good. Most people are accessing the site just fine.

I have checked the SSL certificate and all is supposedly good with that (though it is bought/owned by the errant webmaster and we need to buy a new one probably anyway).

Any ideas why some people are getting this error/what it is? And where I even start to find someone to help fix it.

The nature of the site is that we have around 2500 people a month who come to us for support with mental health and suicidal urges and if even a small portion of them are being blocked by something, that is a big concern to me that they won't get helped - and I have already had panic emails from some that they can't reach the site.

Any help or ideas would be massively appreciated.

2

Your web site is not accessible to users who have IPv6, (about a quarter of the US and close to 10% worldwide, and growing) because your DNS records point to an IPv6 address which does not correspond to your server.

suicideforum.com has address 68.233.227.33
suicideforum.com has IPv6 address 2604:4300:b:6::20:2

When testing via IPv4, I can reach your site and get the correct certificate. On IPv6, I reach a completely different site whose SSL certificate claims to be corvuise.me and which serves the Forbidden error you noted.

To resolve the problem, correct your DNS AAAA record so that it has the correct IPv6 address of your server (or remove it, if your server doesn't yet have IPv6).

locked by Michael Hampton Mar 8 '16 at 16:24

This post has been locked due to the high amount of off-topic comments generated. For extended discussions, please use chat.

  • What is your explanation for 403 ?? I am guessing this is nothing to do with SSL but some resource of his app is not having right permissions set? – hagrawal Mar 7 '16 at 23:10
  • @hagrawal Huh? The 403 is irrelevant, because it's on someone else's server! – Michael Hampton Mar 8 '16 at 0:38
  • It will not be someone else's server but their own sucide forum server .. Probably something to do with server trying to access a resource for which it doesn't have appropriate permissions .. But yes it is not related to IP version thing .. – hagrawal Mar 8 '16 at 10:24
  • @hagrawal I'm sorry, but you're mistaken. The user fixed this issue using my directions before you ever said anything. – Michael Hampton Mar 8 '16 at 15:05
  • Buddy, I never meant that I am trying to help the OP with my comments, I wanted to segregate the fact that "NET::ERR_CERT_AUTHORITY_INVALID" has nothing to do with 403 .. – hagrawal Mar 8 '16 at 15:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.