Page MenuHomePhabricator

Whitelist Matrix.org IP range from Sygnal bans in MirahezeBot
Open, HighPublic

Description

Problem: With Matrix.org bridging support having now been added to Libera.Chat, with some nominal kinks to work through but otherwise running quite well and generally meeting or exceeding my expectations, we are eager to have our handful of Matrix.org users rejoin us from the former Freenode channels. The problem, though, is as Libera.Chat has not set up gateway cloaks for Matrix.org, IRCCloud, etc., for the various IRC clients. Thus, in net split situations, the user disconnects and is kickbanned by Sygnal as part of the MirahezeBot AntiSpamSopel plugin.

I've started this PR; however, @RhinosF1 said it requires string splicing to whitelist the range. We basically just need to whitelist all IPs in the /64 CIDR range, so 2001:470:69fc:105::/64.

Feel free to either (a) modify my PR by pushing a patch to my patch branch (preferred) or (b) close my PR and open a new PR, linking to my closed PR in the new PR.

I'm triaging as Unbreak Now for now, but may lower to High if absolutely required. Note, though, that if this is not done within the next 24-48 hours, we'll have to temporarily pull MirahezeBot's +o flag, as @Reception123 also reminded me that there was never a consensus that NOPP was to extend from on-wiki to IRC channels. This was extended, largely, by a decision by the MirahezeBots team, with at least some support of platform moderators.

@Sario528, @MacFan4000, I'm adding both of you to the task, so hopefully either of you can help implement this easy patch. :)

Details

Security
None

Event Timeline

Dmehus triaged this task as Unbreak Now! priority.Jun 6 2021, 4:10 PM
Dmehus created this task.
Dmehus updated the task description. (Show Details)
Dmehus added subscribers: Sario528, MacFan4000.
RhinosF1 lowered the priority of this task from Unbreak Now! to High.Jun 6 2021, 4:22 PM

Moving to high as there are workarounds and the few matrix users I know already have cloaks. As long as the cloak applies before they join, it's useless but I can come up with an exemption soon if no one else does.

In T256#4561, @RhinosF1 wrote:

Moving to high as there are workarounds and the few matrix users I know already have cloaks. As long as the cloak applies before they join, it's useless but I can come up with an exemption soon if no one else does.

Okay, thanks. I'll give it until 8 June 2021 before removing -o from MirahezeBot, as not all Matrix.org users are identified.