hi,

i have a premium uptobox account and since this afternoon all uptobox links reported an error with "try restarting this link (plugin outdated)".

this is my log

16.04.17 00.34.42 <--> 16.04.17 00.51.59 jdlog://2923189150841/

thank you

[raztoki]

far as I can tell its a cloudflare < > uptobox issue

raztoki

Hi all,

While downloading with my premium Uptobox account (**External links are only visible to Support Staff****External links are only visible to Support Staff**), I have the Plugin out of date error message.

Here my log to support you for solving this issue:
16.04.17 10.40.19 <--> 16.04.17 10.39.59 jdlog://1263189150841/

Thanks

[raztoki]

its a hoster issue,
they return 403 error to all premium customers.
free users don't seem to suffer.

raztoki

Hello,

Jdownloader DDOS Uptobox.com by retrying/restarting? every download since this Friday.


We blocked it by return 403 errror, but you are still sending more than 3000req/s.... From tens of thousands of IP.

Can you check what you are doing from your side since 2/3days?

Nothing changed from our side (except 403 return since yesterday to reduce DDOS impact...)

You can see logs from one user IP (legit user), return 200 but flooding all long day.... all jdownloders users are doing this since few days, and jdownloader represents now 90% of all our traffic...

**External links are only visible to Support Staff****External links are only visible to Support Staff**




Thank you,
Uptobox.com CTO.

[MrDownloader]

Sunday 16, April 2017

JDownloader 2 Build Date: Thu Apr 13 11:35:29 CEST 2017

Hi everybody,

I have a Premium Uptobox.com account and it work good normally with JD 2.
But since last friday nothing work and I received all time the following message:

An Error occured! (uptobox.com) Try restarting this link (plugin outdated?)

If I try the same links using Chrome all work good.
So what happen ?

C:\XXXX\Turing\AppData\Local\JDownloader 2.0\JDownloader2.exe" brdebug
output.log

JarHandlerWorkaroundOracle:setURLStreamHandlerFactory
JarHandlerWorkaroundOracle:replaceLauncherFactory
JarHandlerWorkaroundOracle:replaceURLClassPath
JarHandlerWorkaroundOracle:replacejarHandler
JarHandlerWorkaroundOracle:replaceLoaders:3
JarHandlerWorkaroundOracle:replaceLoader:0:handler
JarHandlerWorkaroundOracle:replaceLoader:0:handler:jar:file:/C:/Users/XXXX/AppData/Local/JDownloader%202.0/.install4j/i4jruntime.jar!/
JarHandlerWorkaroundOracle:replaceLoader:1:handler
JarHandlerWorkaroundOracle:replaceLoader:1:handler:jar:file:/C:/Users/XXXX/AppData/Local/JDownloader%202.0/JDownloader.jar!/

[raztoki]

@starouille
I don't think the approach you've taken to prevent a individual warrants carpet ban of all your paying premium customers (Our stats shows you've done this with 98% efficiency). Banning/preventing connection in this fashion actually just increases the frequency of requests, because it moves down the list one after another until plugin defect is set to each link. If individual has hundreds/thousands of links queued you will still receive requests.

Just to prove this, nothing has changed on our side in since 11th Feb this year in respect to your plugin.

raztoki

Just understand we DIDN'T BANNED "jdownloader", we take all requests which DDOS Uptobox.com last friday, analyse them, blocked them... and .. oh.. jdownloader is blocked... Q.E.D....

i sent you a screen, BEFORE this blocklng state, do you think is that normal? it's was code return 200... I can send you 10GB of logs if you want.


Also, we didn't banned premium customers, just remove these 3K/s requests. Premium or not, just removed the shit


But, maybe it's not jdownloader but another plugin/application (but i don't think an other plugin is popular as Jdownloader to gen 3K download request per/s). As said, we didn't blocked jdownloader directly.

You are right, maybe this blocking state gen more r/s but it's the only way to stop this DDOS (for example 3Kr/s of 403 errors is less CPU expansive than 1Kr/s download requests)

Please, Add me on skype to discuss about it.

[raztoki]

Guess we have to agree to disagree, I call it a 'carpet ban' as an analogy. Your changes do this regardless if you did it on purpose or not. FYI our stats backend shows free users without account are not blocked, only people that try and download with an account.

I saw the screen shot, and your previous edit history. All I can take from it is 1-4 GET request every second to that URL. Assuming its a single single file uid which you masked and a single IP address masked. I don't really see it as 'proof' in this presented form. 10Gigs of server logs wont work for me though ;p At most I could see JD doing 2 gets to a single fuid within same second, rest requests should be posts care of <form, to get the download started, could be still within the same second depending on user <> server latency.

JD shouldn't create DDoS events to your service, though you claim otherwise. Any reason why you don't use cloudflare as intended and let them prevent DDoS events to your service (before it reaches your servers)?

If you want to solve this, contact me on IRC.

raztoki

[raztoki]

meh you edit alot, sent skype ping.

Great news, it's working for me now even with my premium account :D Thanks guys

[raztoki]

good stuff

raztoki

[confused]

Strange. With registered free account, I get the plugin out-of-date error. No problem downloading without any account.

[rocco123]

Still doesnt work at my end with premium. Works without.

Hi,

From my side the plugin works without SSL checked.

BR,

[raztoki]

our stats backend shows its down from say 95% failure to maybe 80% failure. Id say maybe they are trying to fix it.

raztoki

[tony2long]

With account, plugin does getpage twice, the first one get 200, the second one get 403.
The second one can be removed if re-login is not required or login with cloned browser.

[raztoki]

@tony2long
you can't get rid of the second request.

@everyone
it should be resolved now, the admin has come up with a better solution than what he using previously.

raztoki