The IPv4 addresses being logged are not accurate (or stable). The following requests were made from from the same computer (should be 192.168.1.135) 220.127.116.11 gemini.zachdecook.com / 21ms 702 20 text/gemini 18.104.22.168 gemini.zachdecook.com / 13ms 702 20 text/gemini 22.214.171.124 gemini.zachdecook.com / 17ms 702 20 text/gemini These requests should be from 192.168.1.133 126.96.36.199 gemini.zachdecook.com / 19ms 702 20 text/gemini 188.8.131.52 gemini.zachdecook.com / 20ms 702 20 text/gemini 184.108.40.206 gemini.zachdecook.com / 19ms 702 20 text/gemini These requests should be from 220.127.116.11 18.104.22.168 gemini.zachdecook.com / 88ms 702 20 text/gemini 22.214.171.124 gemini.zachdecook.com / 85ms 702 20 text/gemini 126.96.36.199 gemini.zachdecook.com / 84ms 702 20 text/gemini (I think someone else in the gemini mailing list had this problem, I'm not sure if they said what server they were using).
On Tue, Dec 01, 2020 at 01:11:39AM -0500, Zach DeCook wrote: >The IPv4 addresses being logged are not accurate (or stable). Can confirm: on gmnisrv master, commit cb2c84b0. All of the following IPs should be from 188.8.131.52. I restarted gmnisrv in the middle for good measure: 184.108.40.206 seirdy.one / 297ms 1559 20 text/gemini [ I restart gmnisrv ] loaded certificate for seirdy.one loaded certificate for localhost listening on [::]:1965 listening on 0.0.0.0:1965 220.127.116.11 seirdy.one / 962ms 1559 20 text/gemini 18.104.22.168 seirdy.one /about/ 512ms 3377 20 text/gemini 22.214.171.124 seirdy.one /music.txt 654ms 11849 20 text/plain Thanks for your work. /Seirdy
>> The IPv4 addresses being logged are not accurate (or stable). > > Can confirm: on gmnisrv master, commit cb2c84b0. I have also observed this on IPv6 - which made me think addresses are intentionally obfuscated for privacy. Is this by design?
On Tue, Dec 01, 2020 at 06:58:46PM +0000, Mark Dain wrote: >which made me think addresses are intentionally obfuscated for privacy. >Is this by design? Is there any benefit to obfuscating IP addresses for privacy rather than omitting them entirely? The mechanism, let alone the rationale, seems rather unclear. If anybody knows more about this than I do, documentation would be appreciated. -- /Seirdy