Last modified: 2014-11-18 18:07:28 UTC
It would be very useful if there was a condition similar to tor_exit_node which would tell whether the user is editing from an open proxy. On hu.wikipedia we are dealing with such an attacker (who is very persistent and probably uses scripted attacks) right now; dnsbl.tornevall.org seems to be very reliable in identifying his proxies. According to their main page, they have about a million IP numbers blacklisted; not too much to clone into a local table if they are willing to share the data. (Otherwise, if a pre-save live check is considered too slow, it would be very helpful even if such an IP-check would be only done after an edit was successfully made from that IP; forcing a vandal to change proxies for every edit is probably enough of an annoyance to make him give up soon.)
MW comes with a proxy blocking tool, but it was slow and considered offensive (scanning ports is like testing locks on doors).
