[Labs-l] IP filtering put in place

[Ryan Lane]

On Thu, Aug 22, 2013 at 10:38 AM, Marc A. Pelletier <marc at uberbox.org>wrote:

> On 08/22/2013 12:27 PM, Faidon Liambotis wrote:
> > Let's use ferm for this
>
> It was really intended as a hotfix for a specific problem; I could see
> the use of ferm as useful if we maintain a blacklist for general
> purposes in and around labs though -- I expect that the stuff I've
> blacklisted isn't miraculously legitimate on other projects.
>
> I'd need to document the nets I've blocked better though (record ASN and
> reason) if we want to make this generally useful.
>
>
I think it's also possible to apply global blacklists via OpenStack as
well... We have support for it at the API level, but it isn't exposed
anywhere right now.

- Ryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wikimedia.org/pipermail/labs-l/attachments/20130822/84f0a04d/attachment.html>