Last modified: 2006-06-08 20:17:55 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T8161, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 6161 - Add proxies to trusted X-Forwarded-For list
Add proxies to trusted X-Forwarded-For list
Status: RESOLVED FIXED
Product: Wikimedia
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: Normal enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
http://nl.wikipedia.org/wiki/Overleg_...
: shell
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2006-06-01 13:15 UTC by Walter Vermeir
Modified: 2006-06-08 20:17 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Walter Vermeir 2006-06-01 13:15:07 UTC
The following is a very serious problem for the users of the Dutch language Wikipedia;

There is a ISP with many users that is offering a filter-service. A service to censor the internet, 
to keep erotic website and so out. This means that all traffic goes throe a range of transparent 
proxies. 

And so has those users for Wikipedia only a small range of ipadresses. And are those users mostly 
always blocked because of the vandalism by other users of that ISP. And because bug 550 is not fixt 
we can not do anything about that. 

The helpdesk of this ISP (Filternet) explained that the support the HTTP_X_FORWARDED_FOR header 
that contains the real ip address of a user of there network. 

And that we, as Wikipedia could use that header for blocking users.

Can this be done?

It is for the ipadresses;
From
http://nl.wikipedia.org/wiki/Overleg_gebruiker:212.45.32.211
to
http://nl.wikipedia.org/wiki/Overleg_gebruiker:212.45.32.224
Comment 2 Walter Vermeir 2006-06-01 14:30:10 UTC
(In reply to comment #1)
> See http://meta.wikimedia.org/wiki/XFF_project#Trusted_XFF_list.

Yes, but it says to contact Tim Starling about this to get them on that list. I have asked him on 
the 4th of April, 26th of April and 22 May but I get no reply.
Comment 3 Rob Church 2006-06-01 14:42:38 UTC
Well, he's a busy bloke. Have you considered asking other system admins who
might be in the know about it?
Comment 4 Walter Vermeir 2006-06-01 16:43:38 UTC
(In reply to comment #3)
> Well, he's a busy bloke. Have you considered asking other system admins who
> might be in the know about it?

That why I have made this ticket to try to get there attention. I will wait a
week or two. After that I will try wikitech-l and #wikimedia-tech. 
Comment 5 Tim Starling 2006-06-04 19:40:49 UTC
212.45.32.224 has no reverse DNS, that's why I didn't add it.
Comment 6 Walter Vermeir 2006-06-04 22:09:13 UTC
212.45.32.210 to 212.45.32.220 do resolve 
Comment 7 Antoine "hashar" Musso (WMF) 2006-06-08 20:13:42 UTC
They do resolve now (checked on zwinger):

$ for i in 10 11 12 13 14 15 16 17 18 19 20; do
> echo "PTR for 212.45.32.2$i:" ;
> dig +short -x 212.45.32.2$i ;
> done ;
PTR for 212.45.32.210:
filter.solcon.nl.
PTR for 212.45.32.211:
filter01.solcon.nl.
PTR for 212.45.32.212:
filter02.solcon.nl.
PTR for 212.45.32.213:
filter03.solcon.nl.
PTR for 212.45.32.214:
filter04.solcon.nl.
PTR for 212.45.32.215:
filter05.solcon.nl.
PTR for 212.45.32.216:
filter06.solcon.nl.
PTR for 212.45.32.217:
filter07.solcon.nl.
PTR for 212.45.32.218:
filter08.solcon.nl.
PTR for 212.45.32.219:
filter09.solcon.nl.
PTR for 212.45.32.220:
filter10.solcon.nl.
$


I edited our settings. Will be live soon.
Comment 8 Antoine "hashar" Musso (WMF) 2006-06-08 20:17:55 UTC
Synced on live :)

Gave a warning in #wikipedia-nl

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links