The DNSBL related settings are broken.
If you're detected as being blacklisted, the following happens:
$this->mBlockedby = wfMsg( 'sorbs' ); $this->mBlockreason = wfMsg( 'sorbsreason' );
However, the actual methods to see if your blocked look for $this->mBlock being a real block object. Hence you're not actually blocked.
Not sure what the cleanest solution would be. either change relavent methods of user to not look for $this->mBlock, or introduce a new FakeBlock class for cases where the user doesn't have a block in db, but is blocked.
Version: 1.19
Severity: normal