freeze break: block hits from a domain thats referring too much

Matt_Domsch at Dell.com Matt_Domsch at Dell.com
Sun May 27 21:53:58 UTC 2012


+1

-----Original Message-----
From: Kevin Fenzi [kevin at scrye.com<mailto:kevin at scrye.com>]
Sent: Saturday, May 26, 2012 10:09 PM Central Standard Time
To: Fedora Infrastructure
Subject: freeze break: block hits from a domain thats referring too much


Our proxy boxes have jumped up to max httpd processed due to a ton of
referring hits from a single domain/page.

I'm going to redirect them to 403 for now and see if that brings
processes down on the proxies.

It's not causing an outage, but it could impact things if it keeps
going on. It may also be affecting smolts.org.

Retroactive +1s? ;)

diff --git a/modules/fedora-web/files/redirects.conf b/modules/fedora-web/files/redirects.conf
index feba7d0..26a2b36 100644
--- a/modules/fedora-web/files/redirects.conf
+++ b/modules/fedora-web/files/redirects.conf
@@ -10,6 +10,10 @@ RewriteRule ^/([^/]+/)?legal/licenses https://fedoraproject.org/wiki/Legal:Licen
 RewriteRule ^/([^/]+/)?legal/trademarks http://fedoraproject.org/wiki/Legal:Trademark_guidelines [R=301,L]
 RewriteRule ^/([^/]+/)?legal https://fedoraproject.org/wiki/Legal:Main [R=301,L]

+# Drop distributed web referrer hits from klopodavonatyl.net
+RewriteCond %{HTTP_REFERER} ^http://(www\.)?klopodavonatyl.net/.*$
+RewriteRule .* - [F]
+
 # Comment this when there is a prerelease available
 # RewriteRule  ^(/.*)?/get-prerelease$ $1/get-fedora [R=302]

kevin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20120527/4eeabb48/attachment.html>


More information about the infrastructure mailing list