freeze break: block hits from a domain thats referring too much

Kevin Fenzi kevin at scrye.com
Sun May 27 03:08:52 UTC 2012


Our proxy boxes have jumped up to max httpd processed due to a ton of
referring hits from a single domain/page. 

I'm going to redirect them to 403 for now and see if that brings
processes down on the proxies. 

It's not causing an outage, but it could impact things if it keeps
going on. It may also be affecting smolts.org. 

Retroactive +1s? ;) 

diff --git a/modules/fedora-web/files/redirects.conf b/modules/fedora-web/files/redirects.conf
index feba7d0..26a2b36 100644
--- a/modules/fedora-web/files/redirects.conf
+++ b/modules/fedora-web/files/redirects.conf
@@ -10,6 +10,10 @@ RewriteRule ^/([^/]+/)?legal/licenses https://fedoraproject.org/wiki/Legal:Licen
 RewriteRule ^/([^/]+/)?legal/trademarks http://fedoraproject.org/wiki/Legal:Trademark_guidelines [R=301,L]
 RewriteRule ^/([^/]+/)?legal https://fedoraproject.org/wiki/Legal:Main [R=301,L]
 
+# Drop distributed web referrer hits from klopodavonatyl.net
+RewriteCond %{HTTP_REFERER} ^http://(www\.)?klopodavonatyl.net/.*$
+RewriteRule .* - [F]
+
 # Comment this when there is a prerelease available
 # RewriteRule  ^(/.*)?/get-prerelease$ $1/get-fedora [R=302]
 
kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20120526/e6023853/attachment.sig>


More information about the infrastructure mailing list