#1158 mod_net_proxy legacy IPv4/IPv6 address not matched in registration_blacklist
Reporter
Ge0rG
Owner
Nobody
Created
Updated
Stars
★ (1)
Tags
Component-Community
Priority-Medium
Status-NeedInfo
Type-Defect
Ge0rG
on
I have a notorious spammer accessing my server via mod_net_proxy (because of no SRV), with the IP address appearing as `::ffff:b91d:af2` in prosody mod_lastlog. However, after adding that address to `registration_blacklist` and reloading the config, the spammer is still able to register new bot accounts.
Zash
on
Prosody version? Any issues with "normal" connections?
Changes
tags Status-NeedInfo
Ge0rG
on
prosody 0.10, didn't notice any anomalies with blocked IPs going through SRV
Zash
on
How/where does the IP address appear?
If you have/can enable debug logs, does the message "User's IP not known; can't apply blacklist/whitelist" appear?
Marking as community issue for lack of anything pointing towards something in Prosody.
Changes
tags Component-Community
Ge0rG
on
I have debug logs enabled, that line doesn't appear in them.
I've blocked all three "variants" of that IP now, "::ffff:b91d:af2", "::ffff:185.29.10.242", "185.29.10.242", but the spammers still are able to register.
I have a notorious spammer accessing my server via mod_net_proxy (because of no SRV), with the IP address appearing as `::ffff:b91d:af2` in prosody mod_lastlog. However, after adding that address to `registration_blacklist` and reloading the config, the spammer is still able to register new bot accounts.
Prosody version? Any issues with "normal" connections?
Changesprosody 0.10, didn't notice any anomalies with blocked IPs going through SRV
How/where does the IP address appear? If you have/can enable debug logs, does the message "User's IP not known; can't apply blacklist/whitelist" appear? Marking as community issue for lack of anything pointing towards something in Prosody.
ChangesI have debug logs enabled, that line doesn't appear in them. I've blocked all three "variants" of that IP now, "::ffff:b91d:af2", "::ffff:185.29.10.242", "185.29.10.242", but the spammers still are able to register.