Hi!
They are adding the exceptions in Cloudflare, but, yes, we need them to improve it.

Thank you.

---

Jesús Carro
Universidad San Jorge
@InSilicoHeart

Hi!
The IT department is trying to open the minimum possible to let you connect but avoid any possible atack.

They have modified the configuration again and it seems you are been able to connect. Could you check?

Thank you!

I continue to receive the same error that I (and others) in this thread have posted already, where we receive a Cloudflare "Are you a human?" challenge rather than the response that BOINC expects.

While I can appreciate your IT department wanting to only open up the minimum needed, the fundamental problem is that your Web Application Firewall (Cloudflare, in this case) has a bot protection feature enabled on a service where communication with bots (read: not humans) is a fundamental requirement of the application.

Attempting to whitelist user agents (or whatever your IT team might be doing) is a fool's errand, because user agents can vary between platforms and different versions/builds of the BOINC client, and someone with evil intent can take advantage of this by having their malicious bot simply use a whitelisted user agent.

Meanwhile, your research (which is presumably being funded by a time-limited grant) is being impaired.

My apologies if I come across as sounding annoyed, but this problem has a very straightforward technical solution.

I, too, am in USA. I have no trouble at all. Here is my machine:

Computer 224473
Computer information
IP address 	Show IP address
Domain name 	localhost.localdomain
Local Standard Time 	UTC -4 hours
Created 	6 Mar 2023, 19:20:26 UTC
Total credit 	1,588,705
Average credit 	8,550.36
Cross project credit 	BOINCstats.com Free-DC
CPU type 	GenuineIntel
Intel(R) Xeon(R) W-2245 CPU @ 3.90GHz [Family 6 Model 85 Stepping 7]
Number of processors 	16
Coprocessors 	---
Virtualization 	None
Operating System 	Linux Red Hat Enterprise Linux
Red Hat Enterprise Linux 8.10 (Ootpa) [4.18.0-553.47.1.el8_10.x86_64|libc 2.28]
BOINC version 	7.20.2
Memory 	125.08 GB
Cache 	16896 KB
Swap space 	15.62 GB
Total disk space 	488.04 GB
Free Disk Space 	479.36 GB
Measured floating point speed 	5.86 billion ops/sec
Measured integer speed 	21.96 billion ops/sec
Average upload rate 	292.05 KB/sec
Average download rate 	11775.55 KB/sec
Average turnaround time 	0.18 days
Application details 	Show
Tasks 	1306
Number of times client has contacted server 	48841
Last time contacted server 	7 Apr 2025, 15:08:37 UTC
Fraction of time BOINC is running 	99.96%
While BOINC is running, fraction of time computing is allowed 	100.00%
While is BOINC running, fraction of time GPU computing is allowed 	100.00%
Task duration correction factor 	1

Here is a recent, successful request for work:

Mon 07 Apr 2025 11:06:34 AM EDT | DENIS@home | Sending scheduler request: To fetch work.
Mon 07 Apr 2025 11:06:34 AM EDT | DENIS@home | Reporting 2 completed tasks
Mon 07 Apr 2025 11:06:34 AM EDT | DENIS@home | Requesting new tasks for CPU
Mon 07 Apr 2025 11:06:39 AM EDT | DENIS@home | Scheduler request completed: got 1 new tasks
Mon 07 Apr 2025 11:06:39 AM EDT | DENIS@home | Project requested delay of 7 seconds
Mon 07 Apr 2025 11:06:41 AM EDT | DENIS@home | Started download of DENIS_Fiber_Beta_20250407112141061120_InitialTest_k_0-Test_23-conf_120.xml
Mon 07 Apr 2025 11:06:42 AM EDT | DENIS@home | Finished download of DENIS_Fiber_Beta_20250407112141061120_InitialTest_k_0-Test_23-conf_120.xml
Mon 07 Apr 2025 11:06:49 AM EDT | DENIS@home | Sending scheduler request: To fetch work.
Mon 07 Apr 2025 11:06:49 AM EDT | DENIS@home | Requesting new tasks for CPU
Mon 07 Apr 2025 11:06:54 AM EDT | DENIS@home | Scheduler request completed: got 1 new tasks
Mon 07 Apr 2025 11:06:54 AM EDT | DENIS@home | Project requested delay of 7 seconds
Mon 07 Apr 2025 11:06:57 AM EDT | DENIS@home | Started download of DENIS_Fiber_Beta_20250407112141061120_InitialTest_k_0-Test_23-conf_127.xml
Mon 07 Apr 2025 11:06:58 AM EDT | DENIS@home | Finished download of DENIS_Fiber_Beta_20250407112141061120_InitialTest_k_0-Test_23-conf_127.xml

---

Still same, no response.

---

Paul.

What happens if you spin a Linux VM on this box and try to add DENIS@home to BOINC in the VM?

I don't know if this will help but I set up both my working box and my non-working box to look up my DENIS@home account key every 10 minutes. Your it team should see one successful attempt and one failure from my IP address every 10 minutes.

I don't know if this will help but I set up both my working box and my non-working box to look up my DENIS@home account key every 10 minutes. Your IT team should see one successful attempt and one failure from my IP address every 10 minutes.

The IT deparment added exceptions a day ago. Have you been able to connect? At least boincstats is still as the previous days...

My Linux xubuntu-24.04 computers still get this error,

56 https://denis.usj.es/denisathome/ 4/4/2025 11:07:43 AM Fetching scheduler list
57 https://denis.usj.es/denisathome/ 4/4/2025 11:07:50 AM Scheduler list fetch from https://denis.usj.es/denisathome/ failed: permanent HTTP error

I'm still getting this error.

Still same, no response.

---

Paul.

I thought I would shuffle work loads around to try to get more CPU cores running DENNIS@home however 0 of the 3 other systems I tried is able to attach to the project.

Still unable to connect.

Any updates?

---

Paul.

From:
https://www.boincstats.com/forum/18/13088,1

"It's the bot fight mode of Cloudflare that blocks the connection. But, it shouldn't block it because I excluded everything with User Agent "BOINC Client".

I've checked some more exclude boxes, please try again, otherwise I have to disable the bot fight mode which I don't really want to do because of all the scrapers."

---

Paul.

Still no change. The problem still exists.

---

Dublin, California
Team: SETI.USA

I'm still getting this error,

56 https://denis.usj.es/denisathome/ 4/9/2025 9:58:51 PM Fetching scheduler list
57 https://denis.usj.es/denisathome/ 4/9/2025 9:58:53 PM Scheduler list fetch from https://denis.usj.es/denisathome/ failed: permanent HTTP error

...and trying to add the project this occurs: This is a Ubuntu Linux box. Boinc 7.18.1
On the others where the project is already added I get what the others get.
The other Linux boxes have Boinc 7.24.1

2025-04-10 10:49:54 | | Fetching configuration file from https://denis.usj.es/denisathome/get_project_config.php
2025-04-10 10:49:54 | | [http] HTTP_OP::init_get(): https://denis.usj.es/denisathome/get_project_config.php
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Found bundle for host denis.usj.es: 0x5a50cafb3530 [can multiplex]
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Re-using existing connection! (#29913) with host denis.usj.es
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Connected to denis.usj.es (104.22.12.169) port 443 (#29913)
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Using Stream ID: 3 (easy handle 0x5a50cb15e960)
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: GET /denisathome/get_project_config.php HTTP/2
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: Host: denis.usj.es
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: user-agent: BOINC client (x86_64-pc-linux-gnu 7.18.1)
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: accept: */*
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: accept-encoding: deflate, gzip, br, zstd
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server: accept-language: en_US
2025-04-10 10:49:54 | | [http] [ID#37982] Sent header to server:
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: HTTP/2 403
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: date: Thu, 10 Apr 2025 14:49:54 GMT
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: content-type: text/html; charset=UTF-8
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cf-mitigated: challenge
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cross-origin-embedder-policy: require-corp
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cross-origin-opener-policy: same-origin
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cross-origin-resource-policy: same-origin
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: origin-agent-cluster: ?1
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: referrer-policy: same-origin
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: server-timing: chlray;desc="92e30db60bd133fa"
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: x-content-options: nosniff
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: x-frame-options: SAMEORIGIN
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cf-chl-out: i+HdQXwNm/h2patxb2IbW53es5xQ7GP/uFj8JB3926PShMpeow3zZoeYog/lrPCwV1KJYxRBD6pe8QzHM4Ovpekr3lOAa4Ur/gYSINW/PmUEnnIqe/ZdAmExIe3+fhEjDaSTxMydQLh40sf3ueO5bw==$TTHLUuyHsnqu/0Wy2i3k+A==
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: expires: Thu, 01 Jan 1970 00:00:01 GMT
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: vary: Accept-Encoding
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: server: cloudflare
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: cf-ray: 92e30db60bd133fa-YUL
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: content-encoding: br
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server:

...and trying to add the project this occurs: This is a Ubuntu Linux box. Boinc 7.18.1
On the others where the project is already added I get what the others get.
The other Linux boxes have Boinc 7.24.1

2025-04-10 10:49:54 | | Fetching configuration file from https://denis.usj.es/denisathome/get_project_config.php
2025-04-10 10:49:54 | | [http] HTTP_OP::init_get(): https://denis.usj.es/denisathome/get_project_config.php
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Found bundle for host denis.usj.es: 0x5a50cafb3530 [can multiplex]
2025-04-10 10:49:54 | | [http] [ID#37982] Info: Re-using existing connection! (#29913) with host denis.usj.es
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server: content-encoding: br
2025-04-10 10:49:54 | | [http] [ID#37982] Received header from server:

Just copy the .xml file from a pc where the project is already added and paste it into the correct folder in your pc that does not have it added and it will be added, you won't get any tasks due to the 'http permanent error' problem but at least it will be there if/when they do get it fixed. I keep a copy of all the projects .xml files on a usb stick just for that reason.

Operating System: Ubuntu 24.04.2 LTS
Kernel: Linux 6.8.0-57-generic
Boinc 8.0.4

while trying to attach via BoincTask
I get this message
10.04.2025 22:11:21 CEST Fetching configuration file from https://denis.usj.es/denisathome/get_project_config.php
but nothing happens

while trying
boinccmd --project_attach https://denis.usj.es/denisathome/ <my account_key>
I get this message
https://denis.usj.es/denisathome/ 10.04.2025 22:17:36 CEST Fetching scheduler list
https://denis.usj.es/denisathome/ 10.04.2025 22:17:38 CEST Scheduler list fetch from https://denis.usj.es/denisathome/ failed: permanent HTTP error
https://denis.usj.es/denisathome/ 10.04.2025 22:19:19 CEST Scheduler list fetch from https://denis.usj.es/denisathome/ failed: permanent HTTP error
https://denis.usj.es/denisathome/ 10.04.2025 22:22:57 CEST Scheduler list fetch from https://denis.usj.es/denisathome/ failed: permanent HTTP error

With the following configurations the attach to Denis does work for me
Ubuntu 24.10 - Boinc 8.0.4
Debian GNU/Linux 12.10 (Bookworm) with Boinc 8.0.4 from testing (trixie)
Fedora Linux 40 - Boinc 8.0.4

---

Matthias

See the most recent posting from the project administrator https://denis.usj.es/denisathome/forum_thread.php?id=307&postid=2781
Issue with cloudfare config and/or firewall.

Hi!
They are adding the exceptions in Cloudflare, but, yes, we need them to improve it.

Thank you.

---

I'm a developer for a stats site, https://www.boincgames.com/. I'm unable to get stats because I first need to get https://denis.usj.es/denisathome/stats/tables.xml to see if stats have been updated, and that page seems to be blocked by a 403 error with Cloudflare-like code. If you don't want just anybody to download the stats, some sites prefer to set a username and password requirement, and we can work with that.

FYI: I was getting this Permanent Error message on both my Linux Mint computers. Noticed that the automatic updater had 20+ updates for the system. After doing the updates on one of them, about 30 minutes later I was able to get a work unit.

The other machine was still giving the permanent error message. Updated it and was able to get a work unit. Both of them took about 30 minutes or so after the update before it would connect.