Connection Errors

Problem:
Browsers lock up (FF or Chrome), Browser causes/gives errors. All errors from apparent redirects. Does not effect chat, ftp or other connectivity, just the browser.  Locked out of actual legit sites 25 out of every 30 minutes.

There is a possibility of one of two causes:
	1. HTML5 cache virus,
	2. Clear.com connectivity provider.

I Personally originally thought it was an HTML5 cache Java virus, but do not know how to prove this. Do not know any tools to run to detect/discover this.  However clear of all browser history and cache did not change the situation and should if anything was stored in the browser cache.  Therefore eliminated this as a possibility.

Running Kubuntu 14.04 LTS on all 8 machines.  No errors on work machine as connects through another connectivity provider. One of the reasons to suspect the connectivity ISP.

Reasons to suspect the connectivity provider:
	1. No Errors from work machine, on different connectivity provider,
	2. Change from connectivity provider DNS caused temporary relief,
	3. Occurs only on interactive (writeable) pages,
	4. Getting errors from CLI from tty1-tty6,
	5. IRC.freenode.net gurus looked at it and think is connectivity provider,

Originally thought it was my connectivity provider, for my home which is Clear, so changed my DNS settings to Google (8.8.8.8) and OpenDNS (208.67.222.222), but only on my main Desktop.  Things were better for a while, then got much worse.

It does not matter what site I go to, if I write to it, it will timeout and give me errors.  Read only pages always seem to work all the time.

I originally suspected my ISP and called their support, we worked through it and discovered the original lockouts seemed to be coming from their DNS server.  Thus I changed to google and OpenDNS DNS settings, bypassing them.  That worked for a while, then the new DNS servers also started locking up, so have concluded it's something on my machine, not on the DNS servers or sites.  That's why I'm trying to debug and fix this, totally toasted by this!

Another call to Clear.com support, I finally got a knowledgeable tier 2 tech and after he read this page and did testing, gave me 2 options on what is happening:

1. He says their log shows frequent changes in the detected and thus linked 3G/4G towers therefore changing the BSID which he says will cause the SSL certificates to invalidate and thus many redirect issues,
2. He says SSL seems to be the common denominator is this problem and wonders about whether my linux boxes like and are using "self signed" SSL certificates.

He additionally pointed out that the mei_me bug I recorded here in the "Side Note" section is a known Ubuntu 14.04 kernel bug and has a patch, so will be talking with #kubuntu and #ubuntu channels on irc.freenode.net to find and fix that part of the problem.

Debugging Proof:
One of the gurus at IRC.freenode.net/##linux suggested a way to prove if it is coming from the connectivity ISP or a virus.  He suggested booting from the Kubuntu LiveDVD, from one of my machines, as the DVD is/will not be writeable and the Firefox will be pure, so if the errors continue it will be the ISP.  Guess what, he was right, the errors still continued from the booted DVD, so know this is coming from the ISP.  Now going to give them HELL.

Side Note:
When I go to other CLI sessions (tty1-tty6) using the "Ctrl+Alt+F(1-6)" I am getting this message every 5 seconds:
*****************************************************************************
   mei_me 0000.00.03.0 timer: connect/disconnect timeout.
*****************************************************************************
This only occurs on machines that are having this web redirect issue (all home machines).  This is also a reason I suspect a virus.

Some sites I go to, which I keep getting locked out of, are:
	www.craigslist.org (errors on 2nd AD post always)
	www.topicalchainreference.com (personal development WP site errors on 2nd/3rd page edits/visits)
	www.pastebin.com (after I edit 3-4 times here)
	www.hostingmaster.com (Dedicated Server where my hosting is)
	my.hostingmaster.com (My Account @ HostingMaster)
	www.linkedin.com
	www.blueletterbible.org
	www.clear.com
	clwr.client.shareholder.com
	www.google.com

When erring I usually get the Google home page first, the unknown domain or a blank page. From craigslist, hostingmaster and linkedin I get the "invalid security certificate" error 1st.

Here are the errors I get:

WordPress.com: (occurs when calling www.topicalchainreference.com)
*****************************************************************************
topicalchainreference.wordpress.com doesn’t exist

Do you want to register topicalchainreference.wordpress.com?
*****************************************************************************

Uknown Domain:
*****************************************************************************
unknown domain: www.blueletterbible.org
*****************************************************************************

Google:
*****************************************************************************
404. That’s an error.

The requested URL /wp-admin/post-new.php?post_type=page was not found on this server. That’s all we know.
*****************************************************************************
and
*****************************************************************************
external-tests1000false100K.bin2009-06-26T20:26:07.000Z"6d1c4bfbccde29af935abcf870ba41f0"100000STANDARD10K.bin2009-06-26T20:26:23.000Z"99a7db9acf7f2c8d81b5149ca3d98fcc"10000STANDARD1K.bin2009-06-26T20:26:37.000Z"1e0c05be7db3c9f542ff85c116330328"1000STANDARD1MB.bin2009-06-26T20:26:55.000Z"cf5c0a9889c053b8608fd975cc288343"1000000STANDARD35K.bin2009-06-26T20:27:15.000Z"0f6988640bac0fabc42344a96b8d4e04"35840STANDARD500K.bin2009-06-26T20:27:30.000Z"c816bcaf550e292efb34b8db00957fc7"500000STANDARD50K.bin2009-06-26T20:27:44.000Z"00e79bfd558239dc8360965a716abb57"50000STANDARD5K.bin2009-06-26T20:27:58.000Z"88542d6d42a2afce59d9cc7d38dab8bb"5000STANDARD8K.bin2009-06-26T20:28:13.000Z"0829f71740aab1ab98b33eae21dee122"8192STANDARDEagle.jpg2009-06-26T20:28:27.000Z"872f760873859c25782397bcb6bc55e4"2563STANDARDPackages.txt2009-06-26T20:29:00.000Z"ca8fc4f805025f1a1918e8148f209ae9"2096STANDARDTestAMS1Directly.html2009-06-26T20:29:15.000Z"b95ac5fb0d567e8c93a5933c1953eeb4"194STANDARDTestDFW3Directly.html2009-06-26T20:29:27.000Z"33dfe223ba10709c8eb4c86b923cf80d"194STANDARDTestDUB2Directly.html2009-06-26T20:29:40.000Z"d520479157a8d7ba2c47b1139dde2a21"194STANDARDTestEWR2Directly.html2009-06-26T20:29:59.000Z"823837bd887f1eb6171e2f16e1cad3c3"194STANDARDTestFRA2Directly.html2009-06-26T20:30:14.000Z"fb1accbad33dbbd823b2ea334d9a1ad5"194STANDARDTestHKG1Directly.html2009-06-26T20:30:27.000Z"17bfe54e7a014f958382b746f01416c2"194STANDARDTestIAD2Directly.html2009-06-26T20:30:39.000Z"7c0af56de5475771e1fa0a593155eaa9"194STANDARDTestLAX1Directly.html2009-06-26T20:30:50.000Z"6427622298f62df1559b9ac17a318e55"194STANDARDTestLHR3Directly.html2009-06-26T20:31:09.000Z"3f800c8da718a5d7df1a318c69d44b82"194STANDARDTestMIA3Directly.html2009-06-26T20:31:22.000Z"060c88e4c317803375a5135a6a09ceeb"194STANDARDTestNRT4Directly.html2009-06-26T20:31:36.000Z"d0963b444d0bb33c7b3f7960d39af8f5"194STANDARDTestSEA4Directly.html2009-06-26T20:31:48.000Z"5f0acabcde15788670ae2d3cc3fc4827"194STANDARDTestSF04Directly.html2009-06-26T20:32:17.000Z"d2ed46fd358d58f1d289368c62c37884"194STANDARDTestSFO4Directly.html2009-06-26T20:32:35.000Z"d2ed46fd358d58f1d289368c62c37884"194STANDARDTestSTL2Directly.html2009-06-26T20:32:46.000Z"ac346dfa24137cc8cf47095069fe782f"194STANDARDlogo_aws.gif2009-06-26T20:28:45.000Z"39931c235ff56eddf1ac93b0104460fa"2756STANDARD
*****************************************************************************

Cloudfront:
*****************************************************************************
ERROR
The request could not be satisfied.
Bad request.

Generated by cloudfront (CloudFront)
Request ID: aKJAvZMCl4WZ0WemH5UM5ymRL02IrvjufS9sLTk_673aeQzUsPBVNA==
*****************************************************************************
A refresh when the cloudfront error occurs always produces a different "Request ID".

CloudFlare:
*****************************************************************************
Error 1001 Ray ID: 20b4a49bb4411f9a • 2015-07-25 03:05:25 UTC
DNS resolution error
What happened?

You've requested a page on a website (davisoft-aec.com) that is on the CloudFlare network. CloudFlare is currently unable to resolve your requested domain (davisoft-aec.com). There are two potential causes of this:

    Most likely: if the owner just signed up for CloudFlare it can take a few minutes for the website's information to be distributed to our global network.
    Less likely: something is wrong with this site's configuration. Usually this happens when accounts have been signed up with a partner organization (e.g., a hosting provider) and the provider's DNS fails.
*****************************************************************************

Hosting Master:
*****************************************************************************
SORRY!
If you are the owner of this website, please contact your hosting provider: webmaster@my.hosting-master.com

It is possible you have reached this page because:

    The IP address has changed.
    The IP address for this domain may have changed recently. Check your DNS settings to verify that the domain is set up correctly. It may take 8-24 hours for DNS changes to propagate. It may be possible to restore access to this site by following these instructions for clearing your dns cache.
    There has been a server misconfiguration.
    Please verify that your hosting provider has the correct IP address configured for your Apache settings and DNS records. A restart of Apache may be required for new settings to take affect.
    The site may have been moved to a different server.
    The URL for this domain may have changed or the hosting provider may have moved the account to a different server.

cPanel, Inc.
Copyright © 2015 cPanel, Inc.
*****************************************************************************

Untrusted Certificate:
*****************************************************************************
This Connection is Untrusted

You have asked Firefox to connect securely to accounts.craigslist.org, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.
*****************************************************************************
3 Links/Choices included with the above:
Button: "Get me out of here"
Link2:  "Technical Details"
Link3:  "I understand the risks"
*****************************************************************************

LinkedIN:
*****************************************************************************
Secure Connection Failed

An error occurred during a connection to www.linkedin.com. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

Report this error
*****************************************************************************

Server not found:
*****************************************************************************
Server not found

Firefox can't find the server at clwr.client.shareholder.com.

    Check the address for typing errors such as ww.example.com instead of www.example.com
    If you are unable to load any pages, check your computer's network connection.
    If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.
*****************************************************************************

Occasionally I get others.  Will update as they occur.

Went on chat to IRC.freenode.net/##linux and the gurus there think it is still the ISP, that is causing all the redirects.  I tend to agree, since I works seamlessly from my computer at work.  I'm emailing the ISP as they have no weekend support and only PDT hours M-F. Will be directing them to this post for details on the problem.

Cheers!

OMR