graph server access from Nokias

RESOLVED FIXED

Status

mozilla.org Graveyard
Server Operations
RESOLVED FIXED
9 years ago
3 years ago

People

(Reporter: aki, Assigned: chizu)

Tracking

Details

(Reporter)

Description

9 years ago
It looks like there's some sort of whitelist for graphs and graphs-stage.mozilla.org.

What's the best way to grant access from the Nokia N8x0s?  They're running on Mozilla Guest, which I would guess would make them look like they're coming from the office.

We could

a) add the office IP(s) to the whitelist, which may or may not be acceptable.  Probably the easiest fix.
b) look into running VPN on each of the Nokias.  VPN software is available.  We may want to create a new account for this rather than using my LDAP account.  This may not be an option on other mobile devices.
c) look into a proxy server or some other thing on mobile-staging, and run VPN on there.
(Assignee)

Comment 1

9 years ago
I've added the office to the whitelist.
Assignee: server-ops → thardcastle
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → FIXED
(Reporter)

Comment 2

9 years ago
Hey Trevor,

I'm getting a 403 Forbidden when trying to access http://graphs-stage.mozilla.org/server/bulk.cgi (I'm able to hit the front page, just not that cgi).  Same thing for graphs.mozilla.org... I'm guessing there's either an apache whitelist that needs updating or apache needs to be restarted graceful?
(Reporter)

Comment 3

9 years ago
Alice found this in the graphs-stage apache configs (conf.d/graphs.mozilla.org.conf):

<FilesMatch ^(collect|bulk).cgi$>
	deny from all
	allow from 10.2
	allow from 63.245.221
</FilesMatch>

Do we need to add 63.245.220 ?
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
(Assignee)

Comment 4

9 years ago
I had a too small subset of 63.245.220 added to production. I changed both production and stage to include the whole 63.245.220 range. Should be fixed now.
Status: REOPENED → RESOLVED
Last Resolved: 9 years ago9 years ago
Resolution: --- → FIXED
(Reporter)

Comment 5

9 years ago
I'm getting permission denied for http://graphs.mozilla.org/server/bulk.cgi from the office... could you take a look?
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
(Reporter)

Updated

9 years ago
Blocks: 455755
(In reply to comment #5)
> I'm getting permission denied for http://graphs.mozilla.org/server/bulk.cgi
> from the office... could you take a look?

Apparently, production graphs.m.o didn't have the changes chizu made to stage. I copied the changes over. Try now?
Status: REOPENED → RESOLVED
Last Resolved: 9 years ago9 years ago
Resolution: --- → FIXED
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.