On Fri, Oct 24, 2014 at 1:34 PM, Arcane 21 <arcane(a)live.com> wrote:
Spammers might be using something similar to the
IPfuck Firefox/Chrome extension, which fakes an IP address instead of allowing the real IP
to be recorded, not sure how we can defend against that sort of thing at present.
MediaWiki doesn't trust the XFF header unless it's from a trusted
proxy, so the user's real IP would be reported.