I can confirm the listing is in the DB

mysql:wikiadmin@db1036 [plwiki]> select * from global_block_whitelist where gbw_address like '2001%';
+--------+--------------------------+--------+-------------+------------+----------------+

+--------+--------------------------+--------+-------------+------------+----------------+

+--------+--------------------------+--------+-------------+------------+----------------+
1 row in set (0.00 sec)

But IP's are still being blocked from that range?

(In reply to comment #1)

But IP's are still being blocked from that range?

I wonder if that was a question to MatmaRex...

(In reply to comment #2)

(In reply to comment #1)

But IP's are still being blocked from that range?

I wonder if that was a question to MatmaRex...

Sorry, yeah. MatmaRex, can you confirm that ipv6 addresses in that range were still being blocked?

Oh, and again for MatmaRex, could you check that if the blocked users are coming from those addresses directly, or if it's an XFF block?

(In reply to comment #3)

Sorry, yeah. MatmaRex, can you confirm that ipv6 addresses in that range were
still being blocked?

Editing from that IP range was still not possible after I tried to unblock it, yes.

(In reply to comment #4)

Oh, and again for MatmaRex, could you check that if the blocked users are
coming from those addresses directly, or if it's an XFF block?

No idea how I could check that. (I am not a checkuser nor a global sysop.)

(The range includes the Wikimedia Poland Toolserver – tools.wikimedia.pl, which is where I was trying to edit from when I encountered this. Not sure if this answers your question.)

I was trying to reproduce this on a dev instance, but I'm unable to do that. The whitelist seems to be working just fine for ipv6.

Is the affected user a bot, since this is on a tools server? Can you give any more details? A capture of the headers? Or of the actual error message, which would verify if this is the IP or an xff block?

(In reply to comment #7)

Is the affected user a bot, since this is on a tools server?

When I filed this bug, the block affected logged-in users as well; this was since changed to just anonymous, so this is not troublesome.

I just tried again:

• Visit https://pl.wikipedia.org/wiki/Specjalna:Lokalny_status_globalnych_blokad
• Input "2001:41D0:0:0:0:0:0:0/40", no reason, checkbox checked, and submit

I get the following red error:

Your change to the local status of a global block was unsuccessful, for
the following reason:

You made no change to the local status of this block. Return to the global
block list.

It is still not possible to anonymously edit pl.wp from tools.wikimedia.pl
(I tried via Lynx while being SSH-d there) – it's in English, even though the wiki language is Polish:

Your IP address has been blocked on all wikis.

The block was made by Matanya (meta.wikimedia.org). The reason given is
abused web hosting. ovh.com.
  * Start of block: 10:32, 24 wrz 2013            // == 2013-09-24
  * Expiry of block: 20:40, 22 mar 2014           // == 2014-03-22

Your current IP address is 2001:41d0:2:7530::2000. Please include all
above details in any queries you make.

We could probably get you an account on the toolserver if you're interested in testing yourself :) (CC-ing Saper who is an admin there.)

csteipp: Is the information in comment 8 sufficient, or do you need more?

I think I'll need to actually play with it a bit, I'm not able to reproduce this locally.

Saper, is it possible to get an account there that I can bounce through to see what's happening?

Chris, I just need your public SSH key.

Hopefully we can trust that my bugzilla account is me:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOjXk3AOCJUGvRwZcnFxCKHZqxkwpr53ZX4atkFzeB7uBnGoyyhYHstD5X56THqF4o3Mg5y7kK1YrdbFyKAenHPXh06AAIck5FecLVoc9HPyUbnicuC7kelQHgzox/41RzfmnFyAjoelOgXG/rFj6iFy3+WCbFL9RdGXcbUPK457u8IMgJS/Bvsze5x0KTVyU464aAHfkuWNepAaWinUgJAjJZ0aM8iJS2/dC3wfZMNHS2+k1oqKNhR0E+G87YcHtobyXZ6Qke0XR5fpP0ncUZCelYXtUNHrkqEk2h2NS93eUuku5vgSiio6UCoRgBDPKwnf1/jnxKuCe0RzFaaDAd csteipp@linux-hv06.site

We're interested in a person posing as csteipp online, not some real Chris :)

Ok, so the root of the issue is that the block whitelist is linked to a non-existent block. The whitelisting is mostly based on block id numbers.

The whitelist prevents global block 25682 from applying, which doesn't exist. The block by Matanya was gb_id 30986.

So deleting and re-issuing the whitelist should work. I'm guessing the global block was issued, the whitelist was created, and then someone re created the global block, so it got a new id number.

Our ruwiki admin OneLittleMouse encountered a similar issue with unblocking 188.32.0.0/16 and 77.37.128.0/18.

Change 285081 had a related patch set uploaded (by Glaisher):
Do UPDATE instead of DELETE INSERT when modifying a global block

https://gerrit.wikimedia.org/r/285081

Change 285081 merged by jenkins-bot:
Do UPDATE instead of DELETE INSERT when modifying a global block

https://gerrit.wikimedia.org/r/285081

Fixed?

In T56496#2234761, @matmarex wrote:

Fixed?

The above patch only prevents new entries from getting hit by this bug. I will try to work on a script to fix the existing entries soon-ish.

Change 285217 had a related patch set uploaded (by Glaisher):
Add script to fix broken global block whitelist entries

https://gerrit.wikimedia.org/r/285217

Change 285217 merged by jenkins-bot:
Add script to fix broken global block whitelist entries

https://gerrit.wikimedia.org/r/285217

Mentioned in SAL [2016-05-27T23:44:49Z] <legoktm> ran extensions/GlobalBlocking/fixGlobalBlockWhitelist.php for T56496