468521 - graph server access from Nokias

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Aki Sasaki (not active)]

It looks like there's some sort of whitelist for graphs and graphs-stage.mozilla.org.

What's the best way to grant access from the Nokia N8x0s?  They're running on Mozilla Guest, which I would guess would make them look like they're coming from the office.

We could

a) add the office IP(s) to the whitelist, which may or may not be acceptable.  Probably the easiest fix.
b) look into running VPN on each of the Nokias.  VPN software is available.  We may want to create a new account for this rather than using my LDAP account.  This may not be an option on other mobile devices.
c) look into a proxy server or some other thing on mobile-staging, and run VPN on there.

Comment 1

[chizu]

I've added the office to the whitelist.

Comment 2

[Aki Sasaki (not active)]

Hey Trevor,

I'm getting a 403 Forbidden when trying to access http://graphs-stage.mozilla.org/server/bulk.cgi (I'm able to hit the front page, just not that cgi).  Same thing for graphs.mozilla.org... I'm guessing there's either an apache whitelist that needs updating or apache needs to be restarted graceful?

Comment 3

[Aki Sasaki (not active)]

Alice found this in the graphs-stage apache configs (conf.d/graphs.mozilla.org.conf):

<FilesMatch ^(collect|bulk).cgi$>
	deny from all
	allow from 10.2
	allow from 63.245.221
</FilesMatch>

Do we need to add 63.245.220 ?

Comment 4

[chizu]

I had a too small subset of 63.245.220 added to production. I changed both production and stage to include the whole 63.245.220 range. Should be fixed now.

Comment 5

[Aki Sasaki (not active)]

I'm getting permission denied for http://graphs.mozilla.org/server/bulk.cgi from the office... could you take a look?

Comment 6

[Reed Loden [:reed]]

(In reply to comment #5)
> I'm getting permission denied for http://graphs.mozilla.org/server/bulk.cgi
> from the office... could you take a look?

Apparently, production graphs.m.o didn't have the changes chizu made to stage. I copied the changes over. Try now?