Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.

Bug 3340 - Allowing subset of a blocked IP Ranges


Summary:	Allowing subset of a blocked IP Ranges

Status:	NEW

Product:	MediaWiki
Classification:	Unclassified
Component:	Special pages (Other open bugs)
Version:	1.5.x
Hardware:	All All

Importance:	Low enhancement with 2 votes (vote)
Target Milestone:	---
Assigned To:	Nobody - You can work on this!

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2005-09-03 04:28 UTC by Luke Stevenson
Modified:	2012-08-03 13:53 UTC (History)
CC List:	3 users (show)

See Also:
Web browser:	---
Mobile Platform:	---
Assignee Huggle Beta Tester:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Luke Stevenson 2005-09-03 04:28:58 UTC

I realise that IP Addresses can now be blocked using CIDR masks of 
between 16 & 32, which is an improvement on single IP Addresses.

For my application, I am wanting to have a restricted number of 
terminals that can access the Wiki.

My suggestions are two-fold:
- Add Full CIDR Support, allowing blocking of any and all ranges of 
addresses.
- Add An "Allow" Option, permitting overidding of the Blocks, and 
thereby providing a good tool for very restrictive access.

The idea here being that a large range of addresses can be blocked 
(eg 172.136.0.0/16) but by processing the "Allow" list after 
the "Block" list (and only if the accessing IP is within a Blocked 
range), I could specify that 172.136.5.0/24 be allowed to access the 
system.

NOTE: I am a newbie, and I have tried to find resources to allow 
this kind of functionality, but without success. If I need 
to "RTFM", feel free to tell me so.

Comment 1 Antoine "hashar" Musso (WMF) 2005-09-18 11:16:28 UTC

Changing summary. Switching to feature request.

There is no such thing as allowing a block of IP addresses. Special:Blockip
just block stuff and that should usually be enough :)

MediaWiki is hardcoded to disallow blocking of block that are more than
a /16 . You can still hack the code around to allow something bigger ;o)

Comment 2 Luke Stevenson 2005-09-18 11:25:42 UTC

Thanks Ashar,

That's what I was looking for - why is MediaWiki hard-coded to limit the block 
size to /16 ? Why not allow larger blocks that that?

Comment 3 Rob Church 2006-04-04 09:37:15 UTC

(In reply to comment #2)
> Thanks Ashar,
> 
> That's what I was looking for - why is MediaWiki hard-coded to limit the block 
> size to /16 ? Why not allow larger blocks that that?

To stop sysops who don't understand how it works from blocking massive subnets
and causing serious problems.

Comment 4 Michael Daly 2007-06-22 17:19:08 UTC

Could this be changed to allow any range for sysops who _do_ know what they're doing?  Perhaps with a parameter in LocalSettings.php so the wiki admin can limit the damage or not (e.g. wgCIDRlimit = 16;)?

I have a lot of problems with spam via several companies within the Asia Pacific Network and see no reason why I shouldn't be able to block nnn.0.0.0/8 without having to enter 256 separate blocks of nnn.nnn.0.0/16.  If I had one single valid user in these ranges, I'd deal with them separately.

Comment 5 Chad H. 2009-10-30 21:42:22 UTC

Added $wgBlockCIDRLimit in r58377. Other request (exempting specific IPs from a range block) is not done, though.

Note You need to log in before you can comment on or make changes to this bug.

Search

Personal tools

Navigation

Links

Contents Listing Alphabetical by Author:

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Unknown Other

Contents Listing Alphabetical by Title:

# A B C D E F G H I J K L M N O P Q R S T U V W Y Z Other

Medical Encyclopedia

Browse by first letter of topic:

A-Ag	Ah-Ap	Aq-Az	B-Bk	Bl-Bz	C-Cg	Ch-Co
Cp-Cz	D-Di	Dj-Dz	E-Ep	Eq-Ez	F	G
H-Hf	Hg-Hz	I-In	Io-Iz	J	K	L-Ln
Lo-Lz	M-Mf	Mg-Mz	N	O	P-Pl	Pm-Pz
Q	R	S-Sh	Si-Sp	Sq-Sz	T-Tn	To-Tz
U	V	W	X	Y	Z	0-9