Page MenuHomePhabricator

HTTP 500 error trying to access phabricator from my server
Closed, ResolvedPublic

Description

If I try to access anything (say, this task) from my server (IP 142.4.211.15), I get this:

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at webmaster@wikimedia.org to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log.

Like, are y'all blocking it or something? But if so then why isn't there a... more informative error message? Also why are you blocking my server? Or if not, what's going on?

Event Timeline

How are you trying to access Phabricator via your server? What command line tool or what not?

Hmm, OVH provider.... can imagine that some ranges might be blocked due to past vandalism.

Can you run curl -s -D - -o /dev/null https://phabricator.wikimedia.org by any chance?

might be blocked due to past vandalism.

Yes, confirmed. This IP is in a range that is blocked by us. It comes from T218589 most likely. CC: @chasemp

why isn't there a... more informative error message

I filed T229620 for this a while ago.

might be blocked due to past vandalism.

Yes, confirmed. This IP is in a range that is blocked by us. It comes from T218589 most likely. CC: @chasemp

why isn't there a... more informative error message

I filed T229620 for this a while ago.

This mechanism (and the soon repeal of it) is being handled by @jbond now see: https://phabricator.wikimedia.org/T218784#6293660

Which requires acl*security but essentially, the mechanism is being changed to a new one and the addresses will be revised in the process.

Okay, that would explain it, at least. T229620 seems pretty major in particular and I'd argue describes the bare minimum of what needs to be resolved here, as when I first ran into this I spent the better part of a day just thinking phabricator was down for some reason. Took it as an excuse to give up entirely and not work on anything, which is great when I'm already having some difficulty getting back into any involvement to begin with when it comes to mw development...

How are you trying to access Phabricator via your server? What command line tool or what not?

Mostly I'm just accessing phabricator through my server via a socks proxy. Unlike gerrit I don't really need to poke this directly much (though sometimes people upload weird stuff here that I need to fetch).

Unfortunately, even if I at least know the problem now, there are times when I have to use my server as a proxy, as it's pretty much the only way I have to download working webpages at all on certain networks. Even if it's not feasible to unblock editing, even just being able to see the pages would be useful, especially when people are sending me questions about things and then instead of a task link they have to send a screenshot of the task as well...

Dzahn added a parent task: Restricted Task.Jul 9 2020, 8:27 PM

Can we exempt Isarra's IP from the blocklist in the meantime?

If the IP block exempt right onwiki also works (at least some of the time) per T254568, maybe I should just go request that? I never bothered because I so rarely actually edit anything anymore, but if it also covers this, that would be an actual reason to request it. Also then maybe I'd actually bother to update documentation on mw.org slightly more often...

If the IP block exempt right onwiki also works (at least some of the time) per T254568, maybe I should just go request that? I never bothered because I so rarely actually edit anything anymore, but if it also covers this, that would be an actual reason to request it. Also then maybe I'd actually bother to update documentation on mw.org slightly more often...

I'm pretty sure IPBE makes zero difference to Phab. Just as the task suggests, getting routed out via the "right" range via Tor "works".

Considering this has been probably broken for a long time and mostly just not noticed, I'd suggest just waiting till early next week when SRE are due to make some changes as per

This mechanism (and the soon repeal of it) is being handled by @jbond now see: https://phabricator.wikimedia.org/T218784#6293660

Aklapper renamed this task from Can't access phabricator from my server to HTTP 500 error trying to access phabricator from my server.Jul 15 2020, 8:59 PM

@Isarra I have now removed the blocking put in place from previous vandalism incidents are you able to confirm if your access issues have been resolved?

Heeey, it works. I have no idea what you did or what's going on so I cannot comment further. Good day, but thank you for whatever it was!

(Sorry, hadn't actually been using it this week, so hadn't noticed anything one way or the other until now.)