Re: [Wikitech-l] Wikipedia giving 403 Forbidden - Wikitech-l - lists.wikimedia.org

List overview All Threads
Download

Re: [Wikitech-l] Wikipedia giving 403 Forbidden

http://en.wikipedia.org/ --> 301...

Re: [Wikitech-l] $wgSpamRegex now...

jidanni＠jidanni.org

21 Feb 2009 21 Feb '09

7:57 p.m.

OK, can you please stop giving 403 Forbidden for HEAD on both pages that do and don't exist. It makes testing difficult.

Reply

Show replies by date

River Tarnell

21 Feb 21 Feb

7:59 p.m.

New subject: Wikipedia giving 403 Forbidden

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 jidanni(a)jidanni.org:

OK, can you please stop giving 403 Forbidden for HEAD on both pages that do and don't exist.

no. the entire point is to avoid sending requests to the backend. the error comes from Squid. - river.

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (HP-UX) iEYEARECAAYFAkmgXQYACgkQIXd7fCuc5vLTTgCffKzkh9TCTFEdtbZ9JOQlcdYm 2eIAoLsuv7KRuPb3w+r1SFRU5ZMEWpMI =/Gfi -----END PGP SIGNATURE-----

Reply

Leon Weber

8 p.m.

New subject: Wikipedia giving 403 Forbidden

On 22.02.2009 03:57:15, jidanni(a)jidanni.org wrote:

OK, can you please stop giving 403 Forbidden for HEAD on both pages that do and don't exist. It makes testing difficult.

% HEAD -PS -H 'User-agent: leon' http://en.wikipedia.org/ HEAD http://en.wikipedia.org/ --> 301 Moved Permanently Where does that make testing too hard? Leon -- Leon Weber, leon(a)leonweber.de 0x8E04D7FC jabber: leon(a)jabber.ccc.de (icq: 261067046) -- Anyway, you should learn German. It's no more difficult than regex. (Richard Quinn)

Reply

Marco Schuster

11:26 p.m.

New subject: Wikipedia giving 403 Forbidden

On Sat, Feb 21, 2009 at 9:00 PM, Leon Weber <leon(a)leonweber.de> wrote:

On 22.02.2009 03:57:15, jidanni(a)jidanni.org wrote:

OK, can you please stop giving 403 Forbidden for HEAD on both pages that do and don't exist. It makes testing difficult.

% HEAD -PS -H 'User-agent: leon' http://en.wikipedia.org/ HEAD http://en.wikipedia.org/ --> 301 Moved Permanently Where does that make testing too hard?

You first have to find some dude who tells you "oh, 403 means probably wrong user agent". IMO it should be stated in the HTML content of the 403 page WHY the request failed. Marco -- VMSoft GbR Nabburger Str. 15 81737 München Geschätsführer: Marco Schuster, Volker Hemmert http://vmsoft-gbr.de

Reply

Daniel Friesen

22 Feb 22 Feb

5:49 a.m.

New subject: Wikipedia giving 403 Forbidden

"403 Forbidden <http://en.wikipedia.org/wiki/HTTP_403>" "X-Squid-Error: ERR_ACCESS_DENIED 0" and do a quick Google search using relevant terms and you should be able to find out the issue pretty fast. 403 might not directly tell you that you used a bad user agent, but it should be a pretty big slap in the face that you weren't doing something right. This has been discussed on the mailing list already, so a good Google search using info from your error should spit out one or two sites or archives which mashup mailing lists. As for "HTML Content"? Head requests don't have HTML bodies. In this case there was absolutely no attempt to find more information on one's own, so you can't say it's impossible to find the information without coming to the list. ~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://nadir-seen-fire.com] -Nadir-Point & Wiki-Tools (http://nadir-point.com) (http://wiki-tools.com) -MonkeyScript (http://monkeyscript.org) -Animepedia (http://anime.wikia.com) -Narutopedia (http://naruto.wikia.com) -Soul Eater Wiki (http://souleater.wikia.com) Marco Schuster wrote:

On Sat, Feb 21, 2009 at 9:00 PM, Leon Weber <leon(a)leonweber.de> wrote:

On 22.02.2009 03:57:15, jidanni(a)jidanni.org wrote:

OK, can you please stop giving 403 Forbidden for HEAD on both pages that do and don't exist. It makes testing difficult.

% HEAD -PS -H 'User-agent: leon' http://en.wikipedia.org/ HEAD http://en.wikipedia.org/ --> 301 Moved Permanently Where does that make testing too hard?

You first have to find some dude who tells you "oh, 403 means probably wrong user agent". IMO it should be stated in the HTML content of the 403 page WHY the request failed. Marco

Reply

Marco Schuster

10:28 a.m.

New subject: Wikipedia giving 403 Forbidden

On Sun, Feb 22, 2009 at 6:49 AM, Daniel Friesen <dan_the_man(a)telus.net> wrote:

As for "HTML Content"? Head requests don't have HTML bodies. In this case there was absolutely no attempt to find more information on one's own, so you can't say it's impossible to find the information without coming to the list.

Overlooked that. But GET / POST requests do have HTML bodies. IMO the best would be if in the HTML body (or in the HTTP header) information about the UA part that triggered the filter be present. Marco -- VMSoft GbR Nabburger Str. 15 81737 München Geschätsführer: Marco Schuster, Volker Hemmert http://vmsoft-gbr.de

Reply

Tim Starling

10:36 a.m.

New subject: Wikipedia giving 403 Forbidden

Marco Schuster wrote:

On Sun, Feb 22, 2009 at 6:49 AM, Daniel Friesen <dan_the_man(a)telus.net> wrote:

As for "HTML Content"? Head requests don't have HTML bodies. In this case there was absolutely no attempt to find more information on one's own, so you can't say it's impossible to find the information without coming to the list.

Overlooked that. But GET / POST requests do have HTML bodies. IMO the best would be if in the HTML body (or in the HTTP header) information about the UA part that triggered the filter be present.

Well, that's impossible without patching Squid, but we can certainly have a separate deny_info file for user agent and IP blocks. Currently we only have two deny_info files: <http://svn.wikimedia.org/viewvc/mediawiki/trunk/debs/squid/debian/errors/> -- Tim Starling

Reply

jidanni＠jidanni.org

27 Feb 27 Feb

9:23 p.m.

New subject: Wikipedia giving 403 Forbidden

Maybe 405 would be more accurate if you don't like just the User-Agent, [RFC2616] 405 Method Not Allowed The method specified in the Request-Line is not allowed for the resource identified by the Request-URI. The response MUST include an Allow header containing a list of valid methods for the requested resource. But Request-Line doesn't include User-Agent, so never mind.

Reply

Marco Schuster

28 Feb 28 Feb

1:28 a.m.

New subject: Wikipedia giving 403 Forbidden

On Fri, Feb 27, 2009 at 10:23 PM, <jidanni(a)jidanni.org> wrote:

Maybe 405 would be more accurate if you don't like just the User-Agent, [RFC2616] 405 Method Not Allowed The method specified in the Request-Line is not allowed for the resource identified by the Request-URI. The response MUST include an Allow header containing a list of valid methods for the requested resource. But Request-Line doesn't include User-Agent, so never mind.

And the response requirement can't be met - if the UA fails, then *no* method will work and using 405 would be inaccurate. Marco -- VMSoft GbR Nabburger Str. 15 81737 München Geschätsführer: Marco Schuster, Volker Hemmert http://vmsoft-gbr.de

Reply

5560

days inactive

5567

days old

wikitech-l@lists.wikimedia.org

Manage subscription

8 comments

6 participants

tags (0)

participants (6)

Daniel Friesen
jidanni＠jidanni.org
Leon Weber
Marco Schuster
River Tarnell
Tim Starling