Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Hewitt, Vivien <Vivien.Hewitt <at> health.wa.gov.au>
Subject: RE: Wiley Online Library error
Newsgroups: gmane.education.ezproxy
Date: Monday 7th October 2013 23:22:19 UTC (over 4 years ago)
If sci-hub.org is the main cause of the IP blocks instigated by Wiley it
might be worth adding the "NeverProxy" directive to your Ezproxy servers:

NeverProxy *.sci-hub.org

So far we haven't had a problem but it may be only a matter of time...

Vivien

Vivien Hewitt | Electronic Services Librarian
Library & Web Services | Fremantle Hospital and Health Service
2nd Floor T Block, Alma Street, FREMANTLE WA  6169
T: +61 8 9431 2205 | F: +61 8 9431 2298 | M: 0421504747
E: [email protected]
www.fhhs.health.wa.gov.au/library


-----Original Message-----
From: Brian Helstien [mailto:[email protected]] 
Sent: Tuesday, 8 October 2013 05:40
To: EZProxy discussion list
Subject: RE: [ezproxy] Wiley Online Library error

Athena,
	Their logs will surely include session date/time.  Search your logs at
that time, perhaps by merely looking at the Ezproxy admin page and
searching your log for something that matches (e.g., this from my logs just
now "- 07/Oct/2013:17:36:06").  Then in your browser, on that page, search
the page content for something like "onlinelibrary.wiley" to find session
lines which would match what Wiley was seeing.  IF you log your users'
login name, or some other code which will enable you to identify an
account, that should be on those lines.

Brian A. Helstien, SISD, MLS,
Director, Special Technologies Initiatives, Library IT, University
Libraries,                       x06913 University of
Southern California,              (213) 740-6913 Los Angeles,
California, 90089                [email protected]
           Information is independent of media or format


-----Original Message-----
From: Athena Hoeppner [mailto:[email protected]]
Sent: Monday, October 07, 2013 12:43 PM
To: EZProxy discussion list
Subject: RE: [ezproxy] Wiley Online Library error

So, I have a n00b question - how do you use Wiley's log file to ID the
compromised account, and how do you know it is being used with sci-hub.org
(or any other offending site)?

Athena

-----Original Message-----
From: Christine Ryan [mailto:[email protected]]
Sent: Monday, October 07, 2013 2:49 PM
To: EZProxy discussion list
Subject: RE: [ezproxy] Wiley Online Library error

We, too, were able to identify a user with a compromised account - and
largely because of the information that Wiley provided.  

We had a similar situation last month where sci-hub illegally obtained one
of our user IDs and was excessively downloading from another publisher. 
That publisher did not have nearly as much information as Wiley and it took
us much longer to identify the compromised account and take action to reset
it.  

With Wiley's information, we ID'd the user in a matter of hours - and we
could restore our access that much faster.  

Chris

*******************************************************************
Christine E. Ryan
Electronic Resources Librarian; Associate Librarian Clemson University
Libraries
Phone:  864.656.5175


-----Original Message-----
From: Jaime Jamison [mailto:[email protected]]
Sent: Monday, October 07, 2013 2:22 PM
To: EZProxy discussion list
Subject: Re: [ezproxy] Wiley Online Library error

I can say with certainty we were able to identify a user with a compromised
account. We notified him and asked him to create a strong password this
time.
Jaime

----- Original Message -----
From: "Michael Curtis" 
To: "EZProxy discussion list" 
Sent: Monday, October 7, 2013 2:12:12 PM
Subject: RE: [ezproxy] Wiley Online Library error

We had a similar experience at Upstate. Wiley sent us a log contains 34
requests for a complete day where the URI's don't appear in our EZProxy
log. But, Wiley claims a compromised EZProxy login was used to make these
requests. 

I notice Wiley content is indexed in Google Scholar so that if I search a
specific article titles I get a *public* Wiley page with a PDF link to the
article content. Following that link, I get stopped at a pay wall, because
our library doesn't subscribe to the recourse. But, the URL to the PDF file
is the exact one in Wiley's log. It's very likely people on our network are
trying to access Wiley content via a Google Scholar search but not getting
farther than the pay wall.

I agree, Wiley is sending a form letter accusation to it's customers and
blocking access without justification.

Mike Curtis



Mike Curtis
Library Technology Analyst
Health Sciences Library
SUNY Upstate Medical University

>>> Athena Hoeppner  10/7/2013 10:09 AM >>>
They said the same to us at UCF.  I've never heard of sci-hub.org, UCF does
not use sci-hub.org, our config.txt does allow proxy traffic from it...
I've appended the full text of the email below.

In all, it seems to me that Wiley is making assumptions, turning off proxy
IPs prematurely, and sending the same reasoning to everyone, whether or not
the reason applies. I'm about to contact my rep.

Athena

"Dear Colleague:

As you know, we continue to investigate sci-hub.org, which I remind you,
uses compromised user credentials from your institution to access your
EZProxy servers to then access IP authenticated content.  Since the
beginning of October, we have identified a compromised proxy at your
institution.  Concurrent with this message, Wiley is suspending this proxy
to protect its content and your security.

We are asking you to use the attached log file to immediately identify the
compromised user credentials, delete them, and once completed send a
confirmation email to [email protected] and the IP will be reactivated for
access to Wiley Online Library.  If you have difficulties in identifying
the source of the breach, you may also email Wiley at the same box and
someone from Wiley's engineering team will be in touch with you to try and
assist.

Thank you for your continued cooperation as we try and protect our
intellectual property and your institutional security."

P.S. Holy cow! So many vacation and old address notices! Is there a
moderator that can eliminate the old addresses?


Athena Hoeppner
Electronic Resources Librarian
University of Central Florida Libraries
[email protected] | 407-823-5049



-----Original Message-----
From: Jaime Jamison [mailto:[email protected]]
Sent: Monday, October 07, 2013 9:55 AM
To: EZProxy discussion list
Cc: Joel Lavoie
Subject: Re: [ezproxy] Wiley Online Library error

Hi Athena,

I know in our case the concern was not the amount of data, but that,
"sci-hub.org, which I remind you, uses compromised user credentials from
your institution to access your EZProxy servers to then access IP
authenticated content."

Jaime 

----- Original Message -----
From: "Athena Hoeppner" 
To: "EZProxy discussion list" 
Cc: "Joel Lavoie" [email protected]>
Sent: Monday, October 7, 2013 8:56:05 AM
Subject: Re: [ezproxy] Wiley Online Library error

Wiley also blocked UCF. They provided an incident file and it showed about
27 downloads over 2 days, frequently with minutes between each access.
Seemed odd to consider that a breach.


Athena Hoeppner
Electronic Resources Librarian
University of Central Florida
Orlando, FL 32817

Jimmy Ghaphery  wrote:


Wiley has blocked your proxy server. The same thing happened to us on
Friday. They sent an email to our Acquisitions contact.

We are still working to resolve it.

Sent from my iPod

On Oct 6, 2013, at 12:36 PM, Jaime Jamison psu.edu> wrote:

> Hello,
>
> When we try to access Wiley Online Library via our databases page
link, we receive the following error in Firefox:
>
> Unable to connect
>
> Firefox can't establish a connection to the server at 127.0.0.1.
>
> I tested from home via our VPN and was able to access the site
without a problem.
>
> Any ideas?
>
> Thank you,
> Jaime
>
> --
> James A. Jamison
> Electronic Resources Specialist
> Pennsylvania State University
> Serials & Acquisitions
> 126 Paterno Library
> University Park, PA 16802
> Phone: (814) 867-0886
> Fax: (814) 863-7293
> [email protected]
>
> ---
> You are currently subscribed to ezproxy as: [email protected]
> To unsubscribe, send request to [email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected] 


---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected] 


--
James A. Jamison
Electronic Resources Specialist
Pennsylvania State University
Serials & Acquisitions
126 Paterno Library
University Park, PA 16802
Phone: (814) 867-0886
Fax: (814) 863-7293
[email protected] 

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected] 

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]

--
James A. Jamison
Electronic Resources Specialist
Pennsylvania State University
Serials & Acquisitions
126 Paterno Library
University Park, PA 16802
Phone: (814) 867-0886
Fax: (814) 863-7293
[email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]


---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]

---
You are currently subscribed to ezproxy as: [email protected]
To unsubscribe, send request to [email protected]
 
CD: 3ms