Viewing filter 892: RS linked through proxy

Filter parameters

Filter ID:	892
Description: (publicly viewable)
Filter hits:	22,875 hits
Statistics:	Of the last 179,362 actions, this filter has matched 13 (0.01%). On average, its run time is 0.16 ms, and it consumes 1.6 conditions of the condition limit.
Conditions: (documentation)	!(contains_any(user_groups, "bot", "sysop")) & equals_to_any(page_namespace, 0, 2, 118) & /* Use added_lines to cancel out edits before using more expensive added_links / (added_lines irlike "\.proxy\.\|\.gate.lib\.\|ebscohost\.com.(pdfviewer\|detail)\|\.ezproxy-v\.\|search\.ebscohost\.com\|ebscohost\.com\.\|\blibproxy\.\|ezproxy\d\.\|\.ucsf\.idm\.oclc\.org\|tinyurl.galegroup.com.nls.idm.oclc.org") & (added_links irlike "\.proxy\.\|\.gate.lib\.\|ebscohost\.com.(pdfviewer\|detail)\|\.ezproxy-v\.\|search\.ebscohost\.com\|ebscohost\.com\.\|\blibproxy\.\|ezproxy\d\.\|\.ucsf\.idm\.oclc\.org\|tinyurl.galegroup.com.nls.idm.oclc.org") & !(rmwhitespace(lcase(added_links)) rlike "search\.ebscohost.?an=") !(contains_any(user_groups, "bot", "sysop")) & equals_to_any(page_namespace, 0, 2, 118) & /* Use added_lines to cancel out edits before using more expensive added_links / (added_lines irlike "\.proxy\.\|\.gate.lib\.\|ebscohost\.com.(pdfviewer\|detail)\|\.ezproxy-v\.\|search\.ebscohost\.com\|ebscohost\.com\.\|\blibproxy\.\|ezproxy\d\.\|\.ucsf\.idm\.oclc\.org\|tinyurl.galegroup.com.nls.idm.oclc.org") & (added_links irlike "\.proxy\.\|\.gate.lib\.\|ebscohost\.com.(pdfviewer\|detail)\|\.ezproxy-v\.\|search\.ebscohost\.com\|ebscohost\.com\.\|\blibproxy\.\|ezproxy\d\.\|\.ucsf\.idm\.oclc\.org\|tinyurl.galegroup.com.nls.idm.oclc.org") & !(rmwhitespace(lcase(added_links)) rlike "search\.ebscohost.?an=")
Notes:	Start filtering this, per https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist&oldid=813788883 Simpler version, we are only logging atm. +1 Beetstra 12/6/2017 Using added_links, maybe cleaner. added_links is pretty expensive (for some reason), so if added_lines works for logging purposes then let's use it ~MA Problem is .. we are going to warn at some point. added_lines does not work, as it may be part of a changed line (or a moved line, both of which in the diff are interpreted as a deleted line and an added line). 3 out of 5 hits were now false positives .. I was considering to turn it to warn after I saw the first two (the proper positives). Check added_lines first to cancel out most edits before using the more expensive added_links ~MA Set to warn and prevent, see https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist&oldid=819509337#Follow_up_-_blacklist_links_to_inside_nets_of_Universities (links may end up being blacklisted, making this filter obsolete). Block more exempt bots/admins that are doing housekeeping 20190216 ~Xaos remove infoweb.newsbank. Maybe not a proxy, caught with others. They creep in through drafts (either in draft or in userspace). Blocking there as well (with the risk of being a bit bitey, but most of these are really utterly useless as they can often not be converted to intelligible links) upgrading to rlike (temporarily as log only for testing; making it warn for a moment) as one of the links is more complex than a straight domain. --Beetstra 11122019 Disabling momentarily per https://en.wikipedia.org/w/index.php?title=Mexico%E2%80%93United_States_border&type=revision&diff=932069951&oldid=932068693 and will reenable after cleaning up. --Jasper Deng 12/23/2019. Expanding on ebscohost.com .. is there any reason why we should not exclude ALL of ebscohost? --Beetstra Added more, both ebscohost as an other proxy Adapting ebscohost to exclude all of ebscohost, adding exclusion for links on search.ebscohost.com that contain BOTH an access number (AN) and 'scope=site' (which seem to be the 'permanent links' that are provided by ebsco as universal). 20220210 Beetstra an lowercase??? 22020503 Beetstra Check for ezproxy2 (or more generally: ezproxy\d) --ProcrastinatingReader 11:00 11 Dec 2022 Remove rmwhitespace(); combined with "." this can cause a match to start in one link and end in another unrelated link. --Suffusion of Yellow 21:05 20 Apr 2024
Flags:	Hide details of this filter from public view Enable this filter Enable the use of [https://www.mediawiki.org/wiki/Special:MyLanguage/Extension:AbuseFilter/Rules_format#Protected_variables protected variables] in this filter Mark as deleted
Filter last modified:	21:06, 20 April 2024 by Suffusion of Yellow (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"data":{"rules":"!(contains_any(user_groups, \"bot\", \"sysop\")) \u0026 \r\nequals_to_any(page_namespace, 0, 2, 118) \u0026\r\n/* Use added_lines to cancel out edits before using more expensive added_links /\r\n(added_lines irlike \"\\.proxy\\.\|\\.gate.lib\\.\|ebscohost\\.com.(pdfviewer\|detail)\|\\.ezproxy-v\\.\|search\\.ebscohost\\.com\|ebscohost\\.com\\.\|\\blibproxy\\.\|ezproxy\\d\\.\|\\.ucsf\\.idm\\.oclc\\.org\|tinyurl.galegroup.com.nls.idm.oclc.org\") \u0026\r\n(added_links irlike \"\\.proxy\\.\|\\.gate.lib\\.\|ebscohost\\.com.(pdfviewer\|detail)\|\\.ezproxy-v\\.\|search\\.ebscohost\\.com\|ebscohost\\.com\\.\|\\blibproxy\\.\|ezproxy\\d\\.\|\\.ucsf\\.idm\\.oclc\\.org\|tinyurl.galegroup.com.nls.idm.oclc.org\") \u0026\r\n!(rmwhitespace(lcase(added_links)) rlike \"search\\.ebscohost.?an=\")","name":"RS linked through proxy","comments":"Start filtering this, per https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist\u0026oldid=813788883\r\n\r\nSimpler version, we are only logging atm.\r\n+1 Beetstra 12/6/2017\r\n\r\nUsing added_links, maybe cleaner.\r\n\r\nadded_links is pretty expensive (for some reason), so if added_lines works for logging purposes then let's use it ~MA\r\n\r\nProblem is .. we are going to warn at some point. added_lines does not work, as it may be part of a changed line (or a moved line, both of which in the diff are interpreted as a deleted line and an added line). 3 out of 5 hits were now false positives .. I was considering to turn it to warn after I saw the first two (the proper positives).\r\n\r\nCheck added_lines first to cancel out most edits before using the more expensive added_links ~MA\r\n\r\nSet to warn and prevent, see https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist\u0026oldid=819509337#Follow_up_-_blacklist_links_to_inside_nets_of_Universities (links may end up being blacklisted, making this filter obsolete).\r\n\r\nBlock more\r\n\r\nexempt bots/admins that are doing housekeeping 20190216 ~Xaos\r\n\r\nremove infoweb.newsbank. Maybe not a proxy, caught with others.\r\n\r\nThey creep in through drafts (either in draft or in userspace). Blocking there as well (with the risk of being a bit bitey, but most of these are really utterly useless as they can often not be converted to intelligible links)\r\n\r\nupgrading to rlike (temporarily as log only for testing; making it warn for a moment) as one of the links is more complex than a straight domain. --Beetstra 11122019\r\n\r\nDisabling momentarily per https://en.wikipedia.org/w/index.php?title=Mexico%E2%80%93United_States_border\u0026type=revision\u0026diff=932069951\u0026oldid=932068693 and will reenable after cleaning up. --Jasper Deng 12/23/2019.\r\n\r\nExpanding on ebscohost.com .. is there any reason why we should not exclude ALL of ebscohost? --Beetstra\r\nAdded more, both ebscohost as an other proxy\r\n\r\nAdapting ebscohost to exclude all of ebscohost, adding exclusion for links on search.ebscohost.com that contain BOTH an access number (AN) and 'scope=site' (which seem to be the 'permanent links' that are provided by ebsco as universal). 20220210 Beetstra\r\n\r\nan lowercase??? 22020503 Beetstra\r\n\r\nCheck for ezproxy2 (or more generally: ezproxy\\d) --ProcrastinatingReader 11:00 11 Dec 2022\r\n\r\nRemove rmwhitespace(); combined with \".\" this can cause a match to start in one link and end in another unrelated link. --Suffusion of Yellow 21:05 20 Apr 2024","group":"default","actions":{"disallow":["abusefilter-warning-proxy-link"]},"enabled":true,"deleted":false,"privacylevel":0,"global":false},"actions":{"disallow":["abusefilter-warning-proxy-link"]}}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

See the documentation on mediawiki.org.

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Tag the edit in contributions lists and page histories

Tags to apply:

(see Wikipedia:Tags for use and formatting)

(please don't rename a tag here, see link above)

(one per line, no commas, publicly visible)

Require the user to complete a CAPTCHA in order to proceed with the action. Users with permission to skip a CAPTCHA are exempt.