On 22/11/11 23:34, Chad wrote:
On Tue, Nov 22, 2011 at 7:12 AM, Tim Starling tstarling@wikimedia.org wrote:
The user's IP address was a Tor exit node. I blocked the IP address in iptables, but when I found out it was an exit node, I also disabled account creation entirely, so that we could stop the vandalism by user account locks. It remains disabled for now.
I don't suppose we could block Tor indefinitely from write actions on BZ?
We can't even block Tor from write actions in MediaWiki, despite having an extension which is meant to do exactly that. See bug 30716. I haven't found any robust way to do it for Bugzilla or Apache, and we should probably fix our own software before we try patching someone else's.
-- Tim Starling