On 22/11/11 23:34, Chad wrote:
On Tue, Nov 22, 2011 at 7:12 AM, Tim Starling
<tstarling(a)wikimedia.org> wrote:
The user's IP address was a Tor exit node. I
blocked the IP address in
iptables, but when I found out it was an exit node, I also disabled
account creation entirely, so that we could stop the vandalism by user
account locks. It remains disabled for now.
I don't suppose we could block Tor indefinitely from write actions
on BZ?
We can't even block Tor from write actions in MediaWiki, despite
having an extension which is meant to do exactly that. See bug 30716.
I haven't found any robust way to do it for Bugzilla or Apache, and we
should probably fix our own software before we try patching someone
else's.
-- Tim Starling