Last modified: 2014-08-17 11:44:34 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T44303, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 42303 - Unable to block large IPv4 /8 ranges
Unable to block large IPv4 /8 ranges
Status: NEW
Product: MediaWiki
Classification: Unclassified
User blocking (Other open bugs)
1.17.x
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-11-20 21:51 UTC by RonaldB
Modified: 2014-08-17 11:44 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description RonaldB 2012-11-20 21:51:02 UTC
On an external MW installation (ver 1.17.0), the parm re max range has been changed as follows:
$wgBlockCIDRLimit = array (
       'IPv4' => 8,
       'IPv6' => 19, # 2^109 = ~6.5x10^32 addresses
);

Applied one /8 hard block. Block log and block list are ok. However certain IP's from that range still succeed to register new accounts.

Because of bug 41778 the fields "ipb_range_start" and "ipb_range_end" have been checked. They are of the type "tinyblob". 

So it might be that somewhere a routine cannot handle the diff between hi and lo of that range (i.e. 16777216) because a variable has been declared as a 16 bit integer or something like that.

Obviously would never be discovered on WMF wikis because max block range is /16
Comment 1 Andre Klapper 2012-11-24 21:13:08 UTC
Have you checked if this problem still happens with a supported version of MediaWiki (if so, which version)?
Comment 2 Andre Klapper 2013-04-05 15:26:16 UTC
RonaldB: Could you answer comment 1, please?
Comment 3 RonaldB 2013-04-05 16:02:04 UTC
@Andre Klapper,

No. Is existing installation and I don't have control re that aspect myself.

But doubt whether this is version specific. As Wikipedia etc. is restricted to blocking /16 ranges at the largest, I fear that the blocking functionality for larger ranges (e.g. /8) has not been tested for ages.

The work-around is obviously breaking down large ranges into (quite a number) of smaller ones.

Btw: reason for interest to block large ranges is spam from countries (e.g. CN) that would never be interested to edit any page on that particular wiki.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links