The Core Dump

A strong conviction that something must be done is the parent of many bad measures

[By Nic Lindh on Saturday, 22 January 2005]

The assault continues

The zombie assault on this domain continues unabated. We’ve managed to staunch the bleeding with some draconian firewall rules–going to have to revisit those rules later on and start letting huge chunks of the Internet back in.

Did I ever mention that it really, really sucks to have to waste time and effort on this crap? I did? Good. Because it very much does.

The vast majority of the spam comes in this form: 24.42.40.x - - [21/Jan/2005:15:49:32 -0700] “GET HTTP/1.1” 200 13814 “” “Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3) Gecko/20030313”

with various IPs, user agents, and requests to sundry perverted sites. So in order to at least not let the crap get through to other sites, we added this to the local .htaccess file:

RewriteCond %{THE_REQUEST} ^(GET HEAD POST)\ /?http:// [NC]RewriteRule .* - [F]

After this, all incoming requests to fully qualified URLs (i.e., they start with http:// are forbidden. If nothing else, it makes Apache have to work much less hard, and hopefully it will keep this domain off other people’s blacklists. It also doesn’t seem to affect the functionality of the site, but please let me know if something’s broken now.

Incidentally, I am now 100% in favor of the death penalty for the assholes who perpetrate this kind of crap.

UPDATE: Changing the .htaccess file seems to have done the trick. Some of the zombies aren’t giving up, but the load is currently hovering around two requests per second. The machine is no longer spawning a new httpd daemon for each request, so memory and CPU are no longer scarce resources.

Turned off all the firewall rules as well, which made me feel like less of an angry fascist.

Soundtrack: “Long Way From Home” by Fatboy Slim itunes

« "The blinking lights are killing me"


Enjoy the ten latest posts!

Any sufficiently advanced incompetence is indistinguishable from malice

Impressions moving from an Apple Watch Series 3 to Series 5

Is there reason to upgrade from a 3 to a 5?

Plans are worthless, but planning is everything

Often injustice lies in what you aren’t doing, not only in what you are doing

Die in a ditch

After all these years, Nic still can’t understand the American attitude to healthcare.

The big thieves hang the little ones

Book roundup, part 29

A sci-fi and fantasy heavy installment that includes The Valedictorian of Being Dead, The Mastermind, Broadsword Calling Danny Boy, Tiamat’s Wrath, The Raven Tower, The Liberation, The Light Brigade and Cryptonomicon.

Politics is not the art of the possible. It consists in choosing between the disastrous and the unpalatable

Book roundup, part 28

Includes The Incomplete Book of Running, Aching God, The Murderbot Diaries, Lies Sleeping, The Consuming Fire, and Rendezvous with Rama.

Las Vegas trip report

Did you know Las Vegas is kind of nutty?