[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Assistance needed with IP block on ci.debian.net



Hi all,

Just to close the loop on this in case it helps others. After discussing this with Antonio, it turns out that there is currently a fail2ban filter [1] in place that automatically blocks access based on the User-Agent, specifically matching Windows, Mac OS (and iOS in practice). This was introduced as a mitigation against large amounts of bot traffic scraping the site and hitting the login endpoint.

As a result, accessing ci.debian.net from a Windows/macOS/iOS device can trigger an automatic firewall block of the originating public IP. That is what caused my IP to be blocked. My IP was manually unblocked, thanks to Antonio, but at the moment I still cannot safely access the service from my phone without risking another network-wide block.

This is understandable as a protective measure and explains the behavior I was seeing.

Thanks again for the clarification and for the help in getting me unblocked.

Best regards,
Nadzeya

[1] https://salsa.debian.org/ci-team/debian-ci-config/-/blob/5322265338bbd6164869b4fcc5f188b6a9377338/cookbooks/debci/files/fail2ban_filter_debci-botnet.conf


Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature


Reply to: