[sr #111186] Was my IP banned? I can't access Guix repo from Savannah

[Bob Proulx]

Update of sr #111186 (group administration):

                  Status:                    None => Done
             Assigned to:                    None => rwp
             Open/Closed:                    Open => Closed

    _______________________________________________________

Follow-up Comment #1:

Yes. It was in the block list for abuse. There is a 3 million strong botnet
that is hammering away at the Savannah git site. Wow! We had to do something
in order to keep it online for users.

I have removed that address from the block list.  I have added it to the allow
list. You should be okay to go from here now.

The problem is that apparently quite a few Brazilian ISPs use CG-NAT Carrier
Grade NAT which shares many, perhaps thousands, of IPs on a single IPv4
address which mixes them all together.

If you could use IPv6 then that should also avoid this problem because IPv6 is
not normally shared in a NAT.  I know that you are at the mercy of your ISPs
but just offering that as a suggestion.

I have added a hack that puts any IP onto a known good list if they have
previously done a successful git fetch or git pull which will prevent them
being added to the block list if the address is also part of an abusive
attack. That should help. But it is not perfect because it depends upon
ordering of actions.

Thank you for writing us! It allows us to communicate. Please keep in touch
and do not hesitate to contact us for these problems! I suggest subscribing to
the savannah-users mailing list so that you can keep informed of these types
of problems.


    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/support/?111186>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/

signature.asc
Description: PGP signature