Can't reach NS&I login page

[#1]

https://radar.cloudflare.com/scan

https://secure.nsandi.com/policyenforcer/pages/not_found.jsf

Scan ID: 51b503e9-8c33-4b35-abc0-a0dae64b9e28 Finished
Submitted URL: https://secure.nsandi.com/ Redirected
Report Finished: Jul 13, 2024 15:56:55 Unlisted
Error:Network error: Too many redirects

Who knows?

[#2]

@jwsg 

he firewall is disabled which also removes the static IP - but this is something we can do. Another ticket mentions Sent 'auto_destroy' signal to component #.......... (Force L2TP Connectivity) -whatever that means - but maybe is important in fixing. 

For inormation, having the firewall enabled forces connection via an L2TP tunnel and an associated static IP.

However, having a static IP is not the basic problem, I couldn't get connection from

1) a Plusnet dynamic IP last week ( a holiday apartment )

2) from my home Plusnet static IP

3) from a Zen IP via a VPN.

So in effect , what support did would have changed your IP but that's all...

edit: tagged incorrect poster

[#3]

I know very little about routing &c, but does the fact that I cannot get the login page up via the originally posted link, but can if I go via the main NS&I site and click the login link on there mean anything to anyone? I can't go any further though, as I do not have an account there.

[#4]

---

@Dan_the_Van wrote:

For me and I expect others when I attempt to connect to https://secure.nsandi.com using a browser netstat reports

 TCP    192.168.10.100:55970   157.203.60.156:443     SYN_SENT

This SYN_SENT error is inline with a routing issues or possibly a firewall but unlikely. BT group having many IP Address ranges, some may work and others may not that's the nature of a complex network.

You can prove if a connection is possible using this link https://onlinechecker.net/ 

I see 443 is Socket error: timed out when using my public IP Address

Yes, but...

https://onlinechecker.net/

Port Scanner
Find Open Ports and Confirm Your Router's Settings

secure.nsandi.com

443 is open || https.

So again, it seems to be a question of what IP address you are sending from.

[#5]

@jab1 

Using my Vodafone hotspot I note when clicking on Login from https:/nsandi.com it redirects you to

https://secure.nsandi.com/thc/policyenforcer/pages/loginB2C.jsf?

So may be https://secure.nsandi.com is now an invalid link as I see "secure.nsandi.,com redirected you too many times."

However the working link for me does not work on a plusnet connection.

[#6]

Good spot, @Dan_the_Van . Strange that the 'secure' link doesn't work for me, but the link from the main site does?

[#7]

Only other possibility (i.e. my desperate wild guess)...

Recent network changes at NS&I secure logon site mean they are now using some IP addresses internally that are the same as some of our Plusnet IP addresses? This means NS&I secure becomes an IP black hole for people on same addresses - our packets can enter but replies never come out again.

[#8]

Wouldn't have thought so, @pvmb - if the IP ranges belong to the BT Group, others can't use them.

[#9]

If you can go to the main site and click on the log in button and get the log in details page then you dont have this exact issue - unrelated matters just complicate a thread about something PN related.

There are two mentions here of successful fixes - both being getting PN support to make a change - it might "only" result in a new IP address but that works and that's more progress than pages of guesses and a focus on the NS&I site when it happens on other sites too. 

[#10]

Can you get to the login page via the main NS&I site, @jwsg ?

[#11]

---

@jab1 wrote:

Wouldn't have thought so, @pvmb - if the IP ranges belong to the BT Group, others can't use them.

---

That is what is supposed to be the case. But, in my experience, lots of things that are not supposed to happen do happen.

[#12]

As I said, I'm no expert, but I do know that an IP range belonging to one entity can't be used by another.

[#13]

---

@jwsg wrote:

If you can go to the main site and click on the log in button and get the log in details page then you dont have this exact issue - unrelated matters just complicate a thread about something PN related.

There are two mentions here of successful fixes - both being getting PN support to make a change - it might "only" result in a new IP address but that works and that's more progress than pages of guesses and a focus on the NS&I site when it happens on other sites too. 

---

True enough about the "unrelated matters" (actually logging on to NS&I), but PN say this is not a PN issue, as far as they are concerned.

The supposed "fix" may work, but doesn't solve the underlying problem. Plus it is a bit ridiculous for every individual person affected to have to ring up PN to ask for a personal fix. Plus, as it is IP related it could just as easily return after fixing if/when their IP address changes at some point in the future.

i.e. It's a "fix", but it isn't a solution.

[#14]

---

@jab1 wrote:

As I said, I'm no expert, but I do know that an IP range belonging to one entity can't be used by another.

---

OTOH, when I was actually working in IT I came across just such a case.

[#15]

How long ago was that ?- I imagine procedures etc. will have changed/been tightened over time for security reasons and so forth.