RE: [Pound Mailing List] Blocking spambots

sec wise <[email protected]> Tue, 01 Mar 2016 20:09:51 +0100
Newsgroups gmane.comp.web.pound.general
Message-ID <[email protected]>
The best way of defending would be whitelisting of course, but that's kind of hard to do for user agents.



Blocking IP's is not a very sustainable solutio; adversaries just jump to a different host in their botnet which changes the request' source address and makes IP blocks useless.



2016-03-01 19:47 GMT+01:00 Jacob Anderson &lt;[email protected]&gt;:

&gt; You could just take the draconian route and block the bot's IP addresses

&gt; using ipfw or iptables. That way you don't even take up resources in pound.

&gt; Just dump them at the gate...

&gt;

&gt; -----Original Message-----

&gt; From: Mike Slinn [mailto:[email protected]]

&gt; Sent: Tuesday, March 1, 2016 10:14 AM

&gt; To: [email protected]

&gt; Subject: Re: [Pound Mailing List] Blocking spambots

&gt;

&gt; robots.txt is only honored by the good guys. For bad guys, robots.txt

&gt; provides a list of places that they know you don't want them to look at.

&gt; Also, if pound blocks the bad guys, the web server won't have to handle

&gt; those requests, which can present a significant load.

&gt;

&gt; --

&gt; To unsubscribe send an email with subject unsubscribe to [email protected]

&gt; Please contact [email protected] for questions.

&gt;

&gt;

&gt; --

&gt; To unsubscribe send an email with subject unsubscribe to [email protected]

&gt; Please contact [email protected] for questions.