Vendor blocks are usually reported directly to the Acquisitions department's email distribution list at liblicense@ou.edu.
Discovery Services follows this distribution list and checks it several times a day.
If a block is reported to an individual, they send it to liblicense@ou.edu, and/or directly to Discovery Services.
When a block is reported, the vendor provides the IP that has been blocked along with detailed logs of the suspicious activity.
Our EZProxy IP is 129.15.14.45.
- When the EZProxy IP has been blocked, we review EZProxy logs and locate the offender's 4x4 and off-campus IP address.
- Once located, we block the 4x4 and the off-campus IP address on the EZProxy server.
- We forward the details about the vendor block along with the 4x4 and IP address of the user to OU IT's CSIRT team.
- They force a user password change, and ask them to reach out to the library to have their account block removed, once their password has been changed.
- We then contact the vendor and let them know what measures have been taken and ask that the block be lifted.
Sometimes, the vendor blocks a campus IP, other than the EZProxy IP.
When that happens we send the information to CSIRT to be researched because we have no access to those logs.