RE: freeze break: block hits from a domain thats referring too much

[<Matt_Domsch@xxxxxxxx>]

Title: freeze break: block hits from a domain thats referring too much

+1

 -----Original Message-----
From: Kevin Fenzi [kevin@xxxxxxxxx]
Sent: Saturday, May 26, 2012 10:09 PM Central Standard Time
To: Fedora Infrastructure
Subject: freeze break: block hits from a domain thats referring too much

Our proxy boxes have jumped up to max httpd processed due to a ton of
referring hits from a single domain/page.

I'm going to redirect them to 403 for now and see if that brings
processes down on the proxies.

It's not causing an outage, but it could impact things if it keeps
going on. It may also be affecting smolts.org.

Retroactive +1s? ;)

diff --git a/modules/fedora-web/files/redirects.conf b/modules/fedora-web/files/redirects.conf
index feba7d0..26a2b36 100644
--- a/modules/fedora-web/files/redirects.conf
+++ b/modules/fedora-web/files/redirects.conf
@@ -10,6 +10,10 @@ RewriteRule ^/([^/]+/)?legal/licenses https://fedoraproject.org/wiki/Legal:Licen
 RewriteRule ^/([^/]+/)?legal/trademarks http://fedoraproject.org/wiki/Legal:Trademark_guidelines [R=301,L]
 RewriteRule ^/([^/]+/)?legal https://fedoraproject.org/wiki/Legal:Main [R=301,L]

+# Drop distributed web referrer hits from klopodavonatyl.net
+RewriteCond %{HTTP_REFERER} ^http://(www\.)?klopodavonatyl.net/.*$
+RewriteRule .* - [F]
+
 # Comment this when there is a prerelease available
 # RewriteRule  ^(/.*)?/get-prerelease$ $1/get-fedora [R=302]

kevin

_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure