From 200b6f4fdb8a3bb06e7b85f136144727f59c205c Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sat, 26 Nov 2011 16:55:25 +0000 Subject: [PATCH] add baidu spider to throttle list Signed-off-by: Stephen Gran --- modules/apache2/manifests/init.pp | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/modules/apache2/manifests/init.pp b/modules/apache2/manifests/init.pp index 4487eef5..cfadaf19 100644 --- a/modules/apache2/manifests/init.pp +++ b/modules/apache2/manifests/init.pp @@ -195,6 +195,14 @@ class apache2 { mod connlimit connlimit-above 2 connlimit-mask 16 jump DROP; jump http_limit' } + @ferm::rule { "dsa-http-baidu": + prio => "21", + description => "slow baidu spider", + chain => 'limit_baidu', + rule => ' + mod connlimit connlimit-above 2 connlimit-mask 16 jump DROP; + jump http_limit' + } @ferm::rule { "dsa-http-rules": prio => "22", description => "http subchain", @@ -204,6 +212,7 @@ class apache2 { saddr 124.115.0.0/21 jump limit_sosospider; saddr (65.52.0.0/14 207.46.0.0/16) jump limit_bing; saddr (66.249.64.0/19) jump limit_google; + saddr (119.63.192.0/21 180.76.0.0/16) jump limit_baidu; mod recent name HTTPDOS update seconds 1800 jump log_or_drop; mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 600 hashlimit 30/minute jump ACCEPT; -- 2.39.2