User talk:Meyer - Revision history

Tux at 23:14, 10 November 2007

2007-11-10T23:14:01Z

←Older revision		Revision as of 23:14, 10 November 2007
Line 166:		Line 166:
	:What do you think?		:What do you think?
	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 08:04, 10 November 2007 (EST)		:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 08:04, 10 November 2007 (EST)
		+	Hi Meyer,
		+
		+	I suspect there is something about the way his company's proxy is configured that is triggering the block. I've not seen anything about BadBehaviour that says anything about blocking reading the wiki. Surely it only attempts to stop writing from dubious sources.
		+
		+	The detailed log for his ip just says something about using a proxy server. Does he actually say what he was attempting to do? maybe proxy editing is blocked?
		+
		+	All that you and I are saying is pointless without further input from gaarder. You need more details of the activity that was blocked. i suppose we could ask someone who is using a proxy to see what happens to them?
		+
		+	I think I'll post asking him for more details? I'll do it now and see what happens. Let's wait for a response...-[[User:Tux\|Tux]] 18:14, 10 November 2007 (EST)

Meyer: /* Proxy Problem? */

2007-11-10T17:43:53Z

Proxy Problem?

←Older revision		Revision as of 17:43, 10 November 2007
Line 162:		Line 162:
	:# gaarder is the only one who's complained.		:# gaarder is the only one who's complained.
	:# gaarder has not cared enough to follow up on the questions I put to him in the thread he initiated on this problem.		:# gaarder has not cared enough to follow up on the questions I put to him in the thread he initiated on this problem.
		+	:# gaarder may be able to access the wiki from his home computer.

	:What do you think?		:What do you think?
	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 08:04, 10 November 2007 (EST)		:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 08:04, 10 November 2007 (EST)

Meyer: /* Proxy Problem? */

2007-11-10T13:04:38Z

Proxy Problem?

←Older revision		Revision as of 13:04, 10 November 2007
Line 147:		Line 147:
	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:19, 6 November 2007 (EST)		:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:19, 6 November 2007 (EST)
	If you can identify the 'wrongness' of his proxy you could let him know in the thread or by pm and see if he can get his IT staff to sort it out. Perhaps he knows what the insecurity problem is for the wiki.? He does say that he runs mediawikis in the post where he recommended some antispam ideas. I do note that traceroute gives what looks like a legitimate commercial group, quite a large operation, when I feed the IP in. That top of the BadBehaviour league,89.149.253.21, leads to internetservice team. Some dubious comments appear when you Google for them. -[[User:Tux\|Tux]] 18:58, 6 November 2007 (EST)		If you can identify the 'wrongness' of his proxy you could let him know in the thread or by pm and see if he can get his IT staff to sort it out. Perhaps he knows what the insecurity problem is for the wiki.? He does say that he runs mediawikis in the post where he recommended some antispam ideas. I do note that traceroute gives what looks like a legitimate commercial group, quite a large operation, when I feed the IP in. That top of the BadBehaviour league,89.149.253.21, leads to internetservice team. Some dubious comments appear when you Google for them. -[[User:Tux\|Tux]] 18:58, 6 November 2007 (EST)
		+
		+	:I don't know anything more about the problem than is contained in the page gaarder quoted in his original post. His company's proxy server is doing something to corrupt the request, at least in Bad Behavior's eyes.
		+
		+	:Today I finally had a chance to look through the Bad Behavior code. Unfortunately, I could find no trace of where this error is being generated, so I still have no clue how to tune or remove the check short of removing Bad Behavior completely. Going farther is going to take more time going through the PHP and trying to consult with the author.
		+
		+	:I am of two minds on whether or not it is worthwhile to pursue this further. Reasons to pursue:
		+	:# I think it's strange for Bad Behavior to be screening clients trying to ''read'' the wiki. The purpose of putting in Bad Behavior and the others was to prevent undesirable content getting ''into'' the wiki. I'm happy for anyone to get information ''out'' of the wiki who wants it.
		+	:# It may be useful in the future to understand better the internals of Bad Behavior in case we need to do further tuning.
		+	:# I sympathize with someone trapped behind paranoid and inflexible corporate security policy.
		+
		+	:Reasons to not pursue:
		+	:# gaarder's company's proxy may be innocent, but if the request problem Bad Behavior is detecting is exploitable by spammers or other undesirables, I don't want to lower our defenses.
		+	:# I don't like the idea of changing our configuration to compensate for something that should be fixed on the client or proxy.
		+	:# gaarder is the only one who's complained.
		+	:# gaarder has not cared enough to follow up on the questions I put to him in the thread he initiated on this problem.
		+
		+	:What do you think?
		+	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 08:04, 10 November 2007 (EST)

Tux at 23:58, 6 November 2007

2007-11-06T23:58:20Z

←Older revision		Revision as of 23:58, 6 November 2007
Line 146:		Line 146:
	:# Should we reconfigure our anti-spam security for the sake of one user, even though there are measures that could be taken on his side to correct the problem?		:# Should we reconfigure our anti-spam security for the sake of one user, even though there are measures that could be taken on his side to correct the problem?
	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:19, 6 November 2007 (EST)		:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:19, 6 November 2007 (EST)
		+	If you can identify the 'wrongness' of his proxy you could let him know in the thread or by pm and see if he can get his IT staff to sort it out. Perhaps he knows what the insecurity problem is for the wiki.? He does say that he runs mediawikis in the post where he recommended some antispam ideas. I do note that traceroute gives what looks like a legitimate commercial group, quite a large operation, when I feed the IP in. That top of the BadBehaviour league,89.149.253.21, leads to internetservice team. Some dubious comments appear when you Google for them. -[[User:Tux\|Tux]] 18:58, 6 November 2007 (EST)

Meyer: /* Proxy Problem? */

2007-11-06T18:19:48Z

Proxy Problem?

←Older revision		Revision as of 18:19, 6 November 2007
Line 138:		Line 138:

	The url is the one that shows on his post to you at the forum. Might it be a user agent problem with his corporate proxy?		The url is the one that shows on his post to you at the forum. Might it be a user agent problem with his corporate proxy?
		+
		+	:Yes, I think that's it. I didn't realize it before, but the error message he posted on the forum is being pulled from [http://www.ioerror.us/bb2-support-key?key=b7830251 the Bad Behavior home site].
		+
		+	:This raises the questions:
		+	:# What is the security risk to the wiki of this problem Bad Behavior is blocking?
		+	:# Is it technically possible to relax this one restriction without uninstalling Bad Behavior?
		+	:# Should we reconfigure our anti-spam security for the sake of one user, even though there are measures that could be taken on his side to correct the problem?
		+	:-- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:19, 6 November 2007 (EST)

Meyer: /* Proxy Problem? */

2007-11-06T18:02:27Z

Proxy Problem?

←Older revision		Revision as of 18:02, 6 November 2007
Line 133:		Line 133:
	== Proxy Problem? ==		== Proxy Problem? ==

-	Hi Meyer, saw the message from gaarder. I suggest thinking about what Bad Behaviour picks upon, rather than the spam blacklist thing. See the url and report I have pasted in.	+	Hi Meyer, saw the message from gaarder. I suggest thinking about what Bad Behaviour picks upon, rather than the spam blacklist thing. See the url and report I have pasted in.

	203.198.178.241 (contribs) blocked 14 times, last was 2007-11-05 05:38:18		203.198.178.241 (contribs) blocked 14 times, last was 2007-11-05 05:38:18

	The url is the one that shows on his post to you at the forum. Might it be a user agent problem with his corporate proxy?		The url is the one that shows on his post to you at the forum. Might it be a user agent problem with his corporate proxy?

Tux at 23:14, 5 November 2007

2007-11-05T23:14:09Z

←Older revision		Revision as of 23:14, 5 November 2007
Line 129:		Line 129:

	I have altered the protection on the main page. Users have to be logged in to edit though! -[[User:Tux\|Tux]] 13:03, 2 November 2007 (EDT)		I have altered the protection on the main page. Users have to be logged in to edit though! -[[User:Tux\|Tux]] 13:03, 2 November 2007 (EDT)
		+
		+
		+	== Proxy Problem? ==
		+
		+	Hi Meyer, saw the message from gaarder. I suggest thinking about what Bad Behaviour picks upon, rather than the spam blacklist thing. See the url and report I have pasted in.
		+
		+	203.198.178.241 (contribs) blocked 14 times, last was 2007-11-05 05:38:18
		+
		+	The url is the one that shows on his post to you at the forum. Might it be a user agent problem with his corporate proxy?

Tux: Main Page Protection

2007-11-02T17:03:28Z

Main Page Protection

←Older revision		Revision as of 17:03, 2 November 2007
Line 124:		Line 124:

	:I have noticed the same thing, the same page title being created periodically by a spambot. Although I don't like leaving blank pages in the database, I think your approach of protecting them after de-spamming is the only tactic we have available right now. Sorry I haven't made any breakthroughs on the new configuration problems, but I will keep looking. Thanks for leading the cheers. -- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:52, 23 October 2007 (EDT)		:I have noticed the same thing, the same page title being created periodically by a spambot. Although I don't like leaving blank pages in the database, I think your approach of protecting them after de-spamming is the only tactic we have available right now. Sorry I haven't made any breakthroughs on the new configuration problems, but I will keep looking. Thanks for leading the cheers. -- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:52, 23 October 2007 (EDT)
		+
		+
		+	== Main Page Protection ==
		+
		+	I have altered the protection on the main page. Users have to be logged in to edit though! -[[User:Tux\|Tux]] 13:03, 2 November 2007 (EDT)

Meyer: /* Protection versus page deletion */

2007-10-23T17:52:12Z

Protection versus page deletion

←Older revision		Revision as of 17:52, 23 October 2007
Line 122:		Line 122:

	-[[User:Tux\|Tux]] 05:34, 23 October 2007 (EDT)		-[[User:Tux\|Tux]] 05:34, 23 October 2007 (EDT)
		+
		+	:I have noticed the same thing, the same page title being created periodically by a spambot. Although I don't like leaving blank pages in the database, I think your approach of protecting them after de-spamming is the only tactic we have available right now. Sorry I haven't made any breakthroughs on the new configuration problems, but I will keep looking. Thanks for leading the cheers. -- [[User:Meyer\|Meyer]] ([[User_talk:Meyer\|talk]]) 13:52, 23 October 2007 (EDT)

Tux at 09:34, 23 October 2007

2007-10-23T09:34:59Z

←Older revision		Revision as of 09:34, 23 October 2007
Line 117:		Line 117:

	== Protection versus page deletion ==		== Protection versus page deletion ==
-	Hi Meyer, you'll have noticed that some pages seem to get 'targeted' for creation/re-creation and then spamming. Some of them are legitimate pages, e.g. talk pages for genuine pages, so I thought I'd try the ~~roolback~~ protect route and see if that helps. I should have talked to you about it earlier but seeing the latest page deletion of a page that turns up in the logs quite frequently I overcame my inertia!	+	Hi Meyer, you'll have noticed that some pages seem to get 'targeted' for creation/re-creation and then spamming. Some of them are legitimate pages, e.g. talk pages for genuine pages, so I thought I'd try the rollback protect route and see if that helps. I should have talked to you about it earlier but seeing the latest page deletion of a page that turns up in the logs quite frequently I overcame my inertia!

	I've put your 'work-list' page on my watch list and I'll try and follow along. I must say that it must be frustrating when you do the changes and it doesn't want to take notice! The really annoying thing is that these seem to be exactly the changes we need/want and that work elsewhere! I'll do my best to get up to speed and be a help instead of just a cheerleader.(If the thought of me in cheerleader costume doesn't cheer you up..nothing will!)		I've put your 'work-list' page on my watch list and I'll try and follow along. I must say that it must be frustrating when you do the changes and it doesn't want to take notice! The really annoying thing is that these seem to be exactly the changes we need/want and that work elsewhere! I'll do my best to get up to speed and be a help instead of just a cheerleader.(If the thought of me in cheerleader costume doesn't cheer you up..nothing will!)

	-[[User:Tux\|Tux]] 05:34, 23 October 2007 (EDT)		-[[User:Tux\|Tux]] 05:34, 23 October 2007 (EDT)