From fe79ea1ce1a4b506d97333ddcbb2727aa7ea113b Mon Sep 17 00:00:00 2001 From: Melissa Draper Date: Wed, 17 Nov 2021 14:14:50 -0800 Subject: [PATCH 1/3] proxy scan faq --- content/_guides/faq.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/content/_guides/faq.md b/content/_guides/faq.md index 5e03af7..520612f 100644 --- a/content/_guides/faq.md +++ b/content/_guides/faq.md @@ -309,3 +309,15 @@ Libera.Chat bridge and may request intervention if any bridged channels cause problems. At our request, the EMS-hosted Libera.Chat bridge regularly prunes idle connections to minimize disruptions to IRC channels during bridge restarts. + +## Why did you scan my address? + +To reduce network abuses, we perform open proxy checks on hosts at connection +time. If an open proxy is detected, then the connection will be terminated. + +Open proxies mean that anyone on the internet can use your connection if they +know the right tricks. This means that an open proxy would allow them to use +your connection for abusive purposes, even without you knowing. + +If you are unsure why a proxy is being detected on your address, you're +welcome to contact staff by email: . From 7a5764d861abf6ef2eddd3410ca0b94041a05f47 Mon Sep 17 00:00:00 2001 From: jesopo Date: Sun, 23 Oct 2022 18:12:10 +0000 Subject: [PATCH 2/3] rewording, examples of scan types --- content/_guides/faq.md | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/content/_guides/faq.md b/content/_guides/faq.md index 520612f..f119a96 100644 --- a/content/_guides/faq.md +++ b/content/_guides/faq.md @@ -312,12 +312,17 @@ restarts. ## Why did you scan my address? -To reduce network abuses, we perform open proxy checks on hosts at connection -time. If an open proxy is detected, then the connection will be terminated. +To reduce abuse on our network, we perform a handful of scans against IPs that +connect to us so we can detect and disconnect abuse-prone hosts. These scans +intend to detect hosts that are open to being abused by random people if they +know how to, due to having limited or no access requirements. -Open proxies mean that anyone on the internet can use your connection if they -know the right tricks. This means that an open proxy would allow them to use -your connection for abusive purposes, even without you knowing. +These scans are uninvasive and are exceedingly unlikely to break something. +They mostly consist of: -If you are unsure why a proxy is being detected on your address, you're +- Attempting to use your host as an anonymous HTTP/SOCKS proxy +- Fingerprinting specific server software +- Checking what registration requirements Matrix homeservers have + +If you are unsure why your address is being detected as abuse-prone, you're welcome to contact staff by email: . From 2ef63b2a706d9a5d2fc5884f168c0f38bc74e14e Mon Sep 17 00:00:00 2001 From: jesopo Date: Tue, 25 Oct 2022 20:24:16 +0000 Subject: [PATCH 3/3] slightly better grammar --- content/_guides/faq.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/_guides/faq.md b/content/_guides/faq.md index f119a96..8984e4d 100644 --- a/content/_guides/faq.md +++ b/content/_guides/faq.md @@ -317,8 +317,8 @@ connect to us so we can detect and disconnect abuse-prone hosts. These scans intend to detect hosts that are open to being abused by random people if they know how to, due to having limited or no access requirements. -These scans are uninvasive and are exceedingly unlikely to break something. -They mostly consist of: +These scans are uninvasive and are very unlikely to break anything. They +mostly consist of: - Attempting to use your host as an anonymous HTTP/SOCKS proxy - Fingerprinting specific server software