CUNY Academic Commons

Still down for me on all browsers. And on my phone.

Can you pass your IP address, Scott? You can find your IP address on https://whatismyipaddress.com/.

Recently, Lihua added some IP blocking for users that hit more than 30 403/404 pages in less than an hour. The IP block would be in effect for a day. I'm guessing your IP might be on there.

Scott, have you tried surfing the Commons with your phone's cellular network instead of wi-Fi as that should provide a different IP address?

68.129.167.158

When I turned off WI Fi on phone I can reach the Commons.

Scott, I can confirm that your IP was on the banned IP list.

We might want to tweak Lihua's algorithm so it is a little bit more lenient.

want me to reach out to him?

I'm working on an email to Lihua right now. For reference, Scott's issue comes somehow from the flat-bootstrap theme:

$ grep "68\.129\.167\.158" ssl_access.log-20220522 | grep " 40[34] " 
68.129.167.158 - - [21/May/2022:14:57:41 -0400] "GET /wp-content/themes/flat-bootstrap/wp-content/themes/flat-bootstrap/bootstrap/css/bootstrap.min.css HTTP/1.1" 404 295 "https://help.commons.gc.cuny.edu/wp-content/themes/flat-bootstrap/css/editor-style.css?wp-mce-49110-20201110" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:100.0) Gecko/20100101 Firefox/100.0" 105212 help.commons.gc.cuny.edu
68.129.167.158 - - [21/May/2022:14:57:41 -0400] "GET /wp-content/themes/flat-bootstrap/wp-content/themes/flat-bootstrap/font-awesome/css/font-awesome.min.css HTTP/1.1" 404 301 "https://help.commons.gc.cuny.edu/wp-content/themes/flat-bootstrap/css/editor-style.css?wp-mce-49110-20201110" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:100.0) Gecko/20100101 Firefox/100.0" 101251 help.commons.gc.cuny.edu
68.129.167.158 - - [21/May/2022:14:57:41 -0400] "GET /wp-content/themes/flat-bootstrap/wp-content/themes/flat-bootstrap/style.css HTTP/1.1" 404 273 "https://help.commons.gc.cuny.edu/wp-content/themes/flat-bootstrap/css/editor-style.css?wp-mce-49110-20201110" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:100.0) Gecko/20100101 Firefox/100.0" 105212 help.commons.gc.cuny.edu

There are a few dozen more entries just like this. When I visit this URL it works https://help.commons.gc.cuny.edu/wp-content/themes/flat-bootstrap/css/editor-style.css?wp-mce-49110-20201110, and the file has been present in the filesystem since May 2021. So I'm not sure why the 404s are happening.

Sorry, I just realized that I've misread the log entries. The problematic requests are to URLs like this:

/wp-content/themes/flat-bootstrap/wp-content/themes/flat-bootstrap/bootstrap/css/bootstrap.min.css

which originates from this file https://github.com/cuny-academic-commons/cac/blob/1.19.x/wp-content/themes/flat-bootstrap/css/editor-style.css#L12= The latter file uses incorrect relative paths.

I'll work on an immediate fix for this theme bug (and report to the theme author if possible) but I'll leave the ticket open for the moment while we have a team discussion about the new fail2ban rules.

but I'll leave the ticket open for the moment while we have a team discussion about the new fail2ban rules.

For the fail2ban rules, Lihua is using this to ignore certain requests:

ignoreregex =.*(robots.txt|favicon.ico|jpg|png)

Perhaps we can also add in CSS and JS filetypes to this rule. If that were in place, Scott wouldn't have been IP-banned.