Page MenuHomePhabricator

Update IP addresses for Wiki Education Dashboard exemptions to rate-limiting and global block
Closed, ResolvedPublic

Description

Yesterday I migrated Wiki Education Dashboard (dashboard.wikiedu.org) to new infrastructure, and its IP address has changed. Now, OAuth edits from the Dashboard are getting blocked with wikimedia-globalblocking-ipblocked-range.

Now edits will come from 45.79.101.112 and/or 2600:3c01::f03c:92ff:fe44:4b6d/128

See previous task T110235 and https://gerrit.wikimedia.org/r/plugins/gitiles/operations/mediawiki-config/+/refs/heads/master/wmf-config/InitialiseSettings.php#8537

I'm not sure if there's a separate exemption to the global that needs to be configured as well; the blocked edit response indicates it's from a global block of 45.79.96.0/20 made by Stanglavine.

Event Timeline

Change 692670 had a related patch set uploaded (by Zabe; author: Zabe):

[operations/mediawiki-config@master] Update IP addresses for Wiki Education Dashboard exemptions

https://gerrit.wikimedia.org/r/692670

2600:3c03::f03c:91ff:fe08:7973/128 is the ipv6 range that went with the 45.56.98.206 server, so I believe the ipv6 line from T151823 can be replaced as well.

Change 692670 merged by jenkins-bot:

[operations/mediawiki-config@master] Update IP addresses for Wiki Education Dashboard exemptions

https://gerrit.wikimedia.org/r/692670

Mentioned in SAL (#wikimedia-operations) [2021-05-18T18:29:34Z] <urbanecm@deploy1002> Synchronized wmf-config/InitialiseSettings.php: 3da5a8bc93c734e93c3012dace49ee1b881927a8: Update IP addresses for Wiki Education Dashboard exemptions (T283096) (duration: 01m 06s)

Zabe claimed this task.
Zabe added a subscriber: Zabe.

Done

Thanks @Zabe! Is this live already? We're still having all our edits blocked like this:

{
error: {
*: See https://en.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at &lt;https://lists.wikimedia.org/mailman/listinfo/mediawiki-api-announce&gt; for notice of API deprecations and breaking changes., 
code: wikimedia-globalblocking-ipblocked-range, 
info: '''Your IP address is in a range that has been [[m:Special:MyLanguage/Global blocks|blocked on all Wikimedia Foundation wikis]].''' The block was made by [//meta.wikimedia.org/wiki/User:Stanglavine Stanglavine] (meta.wikimedia.org). The reason given is ''[[m:NOP|No open proxies/Webhosts]]: please read [[m:Global blocks/FAQ|the FAQ]] should you be affected ''. * Start of block: 21:31, 21 March 2021 * Expiry of block: 21:31, 21 March 2024 Your current IP address is 45.79.101.112 and the blocked range is 45.79.96.0/20. Please include all above details in any queries you make. If you believe you were blocked by mistake, you can find additional information and instructions in the [[m:Special:MyLanguage/No open proxies|No open proxies]] global policy. Otherwise, to discuss the block please [[m:Steward requests/Global|post a request for review on Meta-Wiki]] or send an email to the [[m:Special:MyLanguage/Stewards|stewards]] [[m:Special:MyLanguage/OTRS|OTRS]] queue at "stewards@wikimedia.org" including all above details.
}, 
servedby: mw1344
}

Thanks @Zabe! Is this live already? We're still having all our edits blocked like this:

{
error: {
*: See https://en.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at &lt;https://lists.wikimedia.org/mailman/listinfo/mediawiki-api-announce&gt; for notice of API deprecations and breaking changes., 
code: wikimedia-globalblocking-ipblocked-range, 
info: '''Your IP address is in a range that has been [[m:Special:MyLanguage/Global blocks|blocked on all Wikimedia Foundation wikis]].''' The block was made by [//meta.wikimedia.org/wiki/User:Stanglavine Stanglavine] (meta.wikimedia.org). The reason given is ''[[m:NOP|No open proxies/Webhosts]]: please read [[m:Global blocks/FAQ|the FAQ]] should you be affected ''. * Start of block: 21:31, 21 March 2021 * Expiry of block: 21:31, 21 March 2024 Your current IP address is 45.79.101.112 and the blocked range is 45.79.96.0/20. Please include all above details in any queries you make. If you believe you were blocked by mistake, you can find additional information and instructions in the [[m:Special:MyLanguage/No open proxies|No open proxies]] global policy. Otherwise, to discuss the block please [[m:Steward requests/Global|post a request for review on Meta-Wiki]] or send an email to the [[m:Special:MyLanguage/Stewards|stewards]] [[m:Special:MyLanguage/OTRS|OTRS]] queue at "stewards@wikimedia.org" including all above details.
}, 
servedby: mw1344
}

It is a global block of the IP address. @Urbanecm Could you please remove the mentioned block?

Thanks. I thought there was something else letting the dashboard IP get around a global block, because it looks like the old IP is also in a blocked range: https://meta.wikimedia.org/wiki/Special:Contributions/45.56.98.206

Thanks @Zabe! Is this live already? We're still having all our edits blocked like this:

{
error: {
*: See https://en.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at &lt;https://lists.wikimedia.org/mailman/listinfo/mediawiki-api-announce&gt; for notice of API deprecations and breaking changes., 
code: wikimedia-globalblocking-ipblocked-range, 
info: '''Your IP address is in a range that has been [[m:Special:MyLanguage/Global blocks|blocked on all Wikimedia Foundation wikis]].''' The block was made by [//meta.wikimedia.org/wiki/User:Stanglavine Stanglavine] (meta.wikimedia.org). The reason given is ''[[m:NOP|No open proxies/Webhosts]]: please read [[m:Global blocks/FAQ|the FAQ]] should you be affected ''. * Start of block: 21:31, 21 March 2021 * Expiry of block: 21:31, 21 March 2024 Your current IP address is 45.79.101.112 and the blocked range is 45.79.96.0/20. Please include all above details in any queries you make. If you believe you were blocked by mistake, you can find additional information and instructions in the [[m:Special:MyLanguage/No open proxies|No open proxies]] global policy. Otherwise, to discuss the block please [[m:Steward requests/Global|post a request for review on Meta-Wiki]] or send an email to the [[m:Special:MyLanguage/Stewards|stewards]] [[m:Special:MyLanguage/OTRS|OTRS]] queue at "stewards@wikimedia.org" including all above details.
}, 
servedby: mw1344
}

It is a global block of the IP address. @Urbanecm Could you please remove the mentioned block?

Seems to be not that easy. There is also a /16 block. And removing that is not something realy wanted.