Is anyone else having a problem with greylisting / blacklisting at http://drupal.org ? I tried to post this earlier and was flagged as spam. My service provider is Telkom. Its happening on 3 different computers with different operating systems (Ubuntu Karmic + Ubuntu Lynx, windows xp), 2 different modems. Telkom tells me that IPs are reset every 24 hours, but drupal.org's greylisting reports a different IP every few requests.
I have a support request with more details here: http://drupal.org/node/1308240 where killes@www.drop.org has valiantly tried to help me. I am very bewildered by all of this and was wondering if anyone can clarify what is going on?
There's a post at honeypot which states that there's an issue with SAIX / NAT web-caching (http://projecthoneypot.org/board/read.php?f=4&i=725&t=725) but to be honest this is a bit beyond me - and if this is the problem, I would have thought the issue would have more coverage. However, my attempts to get assistance where met with incomprehension at Telkom.
If anyone can shed some light I'd really appreciate it.
Heli
Comments
Me too
Hey,
I had tons of problems with this issue. I've been using a web-proxy, which sucks because I need to copy some URL to wget them and the web-proxy encrypts it. I presume the problem is that every single IP address on the rotation will eventually land on a PC infected with the spambot. Eventually every IP in SA will be blacklisted. We need to urge Drupal.org to look at an alternative. Especially for logged in users. 'Tis something I requested, but apparently the IP is identified before login details are checked. Grrr
Thanks so much for getting
Thanks so much for getting back to me. Its such a relief to hear its not just me (not that I want anyone else to share this frustration).
Of course a webproxy is the answer.
I'm surprised that in this instance google was not my friend and I battled to find info (not so surprised about telkom )
Have you experienced problems with other sites, or just drupal?
Thanks so much for getting
Thanks so much for getting back to me. Its such a relief to hear its not just me (not that I want anyone else to share this frustration).
Of course a webproxy is the answer.
I'm surprised that in this instance google was not my friend and I battled to find info (not so surprised about telkom )
Have you experienced problems with other sites, or just drupal?
I've been experiencing the
I've been experiencing the same, Heli. Thanks for reporting the issue and following up. There's a related post here: http://drupal.org/node/1245358. Websites that detect location show me as located in Pretoria while I'm actually connecting from KZN.
I'm not sure how Telkom manages their I.P allocation.
My I.P shows up as 41.146.247.47 on whatismyip.org and my primary DNS server setting on my router appears as 196.43.45.190. drupal.org detects 196.43.45.190 instead of 41.146.247.47. It looks like Telkom allocates dynamic ips between the 195.xxx to 198.xxx range. Often an ip may be allocated to a legitimate spammer or to an infected machine :D
I'm unable to access this
I'm unable to access this page at the time of writing: http://drupal.org/documentation/version-info#when
I haven't had any
I haven't had any blacklisting issues with drupal.org - I'm currently connecting through my phone, though - my current IP is 41.3.70.30
Reading the projecthoneypot link in the post shows that there is plenty of spam coming out of the SAIX class C subnet. The reply below that says that basically SAIX should police their own subnet better, and disallow outgoing spam. I tend to agree with them. Unfortunately, there is no quick fix for you, aside from getting a VPS somewhere and running your own VPN. Or finding someone at SAIX and convincing them to change their policy. Or changing to a different ISP that has better support (I don't expect much from Telkom - it's nearly a month after they were supposed to move my line, and I still don't have ADSL). My ISP is Afrihost.
The easiest option would be
The easiest option would be to switch to a different data provider (your line stays with Telkom, but you don't buy your bundle from them). I'm with Afrihost too and it's really simple to setup accounts there. That should assign you an IP in a different range.
If you use a proxy or some other mechanism to access drupal.org now, it sounds like you could have the same problem at another site later that uses the same system.
This isn't a way to fix the problem for everyone though, so hopefully another solution can be found.
George
Afrihost too
I'm on Afrihost too, so the problem is not limited to Telkom
Remember That In South Africa
We have very few top level ISP. The two that spring to mind for DSL solutions are SAIX which is the Telkom derivitive and IS. If your ISP gets its bandwidth from SAIX then you could be issued an IP address in that range which is being grey / black listed. Just a thought :)
I have an Afrihost account that does the same.
I have to refresh a page 10x or more to get access to drupal.
This is a big problem for all South Africans, except mobile users, but we all don't have that kind of bandwidth money.
Does Drupal get spammed so many times a day that a blacklist module needs to be in place?
I opened an issue here: http://drupal.org/node/1360010