mod_refererblacklist?
My poor server took a hammering today, when some referer-spamming shitbag hammered MovableType’s comments CGI script, effectively DDOSing it.
I chucked in some mod_rewrite rules to try to make this a little less likely in the future, but here’s a Lazyweb request:
Any ideas on a way to take the Comment Spam master blacklist and use it at an Apache level to block requests having a Referer that matches? Preferably one which doesn’t use more CPU cycles than the spam attack I’m looking to solve!
About 7 years, 4 months ago, richard commented:
About the best method is to deal with it at the TCP level, firewalling off known offenders before they even get to the web server... I haven't bothered myself because it hasn't become a huge issue on my server yet.