On 3/22/06, freakofnurture <freakofnurture(a)hotmail.com> wrote:
On 3/22/06, freakofnurture wrote:
If what you said was true, I would not have been able to perform this edit
through it:
http://en.wikipedia.org/w/index.php?title=Wikipedia:Sandbox&diff=prev&a…
Sorry, your IP is a Tor proxy.
Do you mean you fired up a Tor client, told it to make a route
with 213.216.199.14 as the exit node, and then made this edit?
Or did you use 213.216.199.14 as a straightforward web proxy?
On 3/22/06, Wwwwolf wrote:
All right, so my guess is there's some Bloody Idiot in the neighborhood who
runs a Tor node, 80/tcp traffic comes out of that host and gets intercepted
and forwarded by the ISP's proxy (that *every* customer is forced to use, I
remind you again).
In other words, the blocked IP is, in my educated guess, *not* the Tor node.
It just unwittingly hides a Tor node behind it.
I think Wwwwolf has the right explanation here.
There's no Tor node at 213.216.199.14:
http://serifos.eecs.harvard.edu/cgi-bin/exit.pl?addr=1
but there are 82.128.216.214 and 82.128.214.254,
both near 82.128.217.58 and in the 82.128.128.0/17 block
owned by Oulu Telephone Company:
http://serifos.eecs.harvard.edu/cgi-bin/whois.pl?q=82.128.216.214
Evidently the vandal is using one of those two as his exit node,
and the resulting traffic passes through the same ISP proxy
as the complaining user's traffic.
Glad XFF enables us to distinguish this guy's traffic
from the Tor-routed traffic.
Greg