freeze break: block hits from a domain thats referring too much

[Kevin Fenzi]

On Sat, 26 May 2012 23:23:23 -0400
Ricky Elrod <codeblock at elrod.me> wrote:

> On 05/26/2012 11:08 PM, Kevin Fenzi wrote:
> > Retroactive +1s? ;) 
> 
> 
> +1, doesn't seem to have broken anything yet. ;)
> 

I got another +1 from Matt in email... 

but after applying this the hits stopped, then resumed with another
domain, but same uri otherwise. 

I have adjusted the redirect to ignore the domain and just look for the
botnet uri. 

kevin
--
diff --git a/modules/fedora-web/files/redirects.conf b/modules/fedora-web/files/redirects.conf
index 26a2b36..2ce9ec7 100644
--- a/modules/fedora-web/files/redirects.conf
+++ b/modules/fedora-web/files/redirects.conf
@@ -11,7 +11,7 @@ RewriteRule ^/([^/]+/)?legal/trademarks http://fedoraproject.org/wiki/Legal:Trad
 RewriteRule ^/([^/]+/)?legal https://fedoraproject.org/wiki/Legal:Main [R=301,L]
 
 # Drop distributed web referrer hits from klopodavonatyl.net
-RewriteCond %{HTTP_REFERER} ^http://(www\.)?klopodavonatyl.net/.*$
+RewriteCond %{HTTP_REFERER} ^http://.*/feed/index.php?pid2=900&sid2=900&mb2=4&partnerid2=81&redir=555&multi=true&aff_id=list004$
 RewriteRule .* - [F]
 
 # Comment this when there is a prerelease available
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20120526/d820e477/attachment.sig>