My isp uses cgnat, so I see these all the time. The two tier internet is here an...

superkuh · on Sept 6, 2023

I dont' want to victim blame here, but if your "ISP" uses cgnat it's not an ISP. It's a web service provider. You should probably get a real ISP.

That said, I have a real ISP, comcast, but comcast does MITM attacks on it's users so I have to tunnel everything through various VPS I rent. Which of course means I get hit with the same cloudflare blocks. And the invisible javascript ones just go in loops no matter how many times I complete the visible side. I just close cloudflare hidden sites' tabs' now. The problem is more and more of the web is hidden behind their computational paywall... even academic journals now.

yjftsjthsd-h · on Sept 6, 2023

> I dont' want to victim blame here, but if your "ISP" uses cgnat it's not an ISP. It's a web service provider. You should probably get a real ISP.

Okay, so that... that is victim blaming. If you don't want to do that, stop doing it. Besides, do you really think someone in this situation can just get a real ISP? I mean, maybe they're in a competitive market and just managed to pick a bad option, but it's unlikely.

superkuh · on Sept 7, 2023

>Besides, do you really think someone in this situation can just get a real ISP?

Yes, I know at least 2 such people who chose to have a wireless ISP despite having a wired option available and affordable. One of them is even slightly technical. They usually don't run into the limits, but when they do it might be the right time to give them a nudge to get a real ISP. I was hoping that'd be the case here.

jeroenhd · on Sept 6, 2023

I think it's been here for much longer. Back in the day, IP addresses would just get blocked; fail2ban was a recommended tool for any web server back in the day. Getting flagged as a bot sucks (I've experienced it for a few days myself) but the modern CAPTCHA solutions are a lot better than the "server did not respond" days from before.

ISPs still failing to implement modern networks and sticking with broken workarounds like CGNAT are as much to blame as the bots tainting their CGNAT IP addresses.

hkt · on Sept 6, 2023

No doubt, but at least in the UK nobody is forcing ISPs to modernise their infrastructure because competition seems to be entirely on price rather than service.