LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-07-2010, 04:09 AM   #1
Hammad101
Member
 
Registered: Dec 2005
Posts: 72

Rep: Reputation: 15
Blocking Bad Bots & HTACCESS Optimization


Hello,

My Pastebin for .HTACCESS

http://pastebin.com/edHRNhPz

If you can offer any tips on improvements..

but the main reason: I cannot get the bots to stop showing up.

Esp the first one in the list.

I need to block these two specifically

Code:
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

&

Mozilla/5.0 (Windows; U; Windows NT 5.1; ja; rv:1.9.2a1pre) Gecko/20090402 Firefox/3.6a1pre (.NET CLR 3.5.30729)
I've tried using various combo but unsuccessful.

Any help would be greatly appreciated
 
Old 11-07-2010, 05:18 PM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Hi,

How do you know they are bots? To me they look like legitimate firefox User-agent strings.

Regards
 
Old 11-08-2010, 01:28 AM   #3
Hammad101
Member
 
Registered: Dec 2005
Posts: 72

Original Poster
Rep: Reputation: 15
They're post Warez Post Bots.

There are programs called Multi-Posters.

Both of them belong to 1) A Cracked Program used by 10s of thousands | 2) Another free program used by millions
 
Old 11-08-2010, 02:00 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Ok, but how can you distinguish them from normal firefox sessions? You can't use these strings in .htaccess because you risk to block also legitimate clients using firefox.
If they come from specific IPs, you can block them using their IPs in the regex'es in .htaccess.
 
Old 11-08-2010, 02:06 AM   #5
Hammad101
Member
 
Registered: Dec 2005
Posts: 72

Original Poster
Rep: Reputation: 15
I daily ban over 10 bots. they're too much trouble.

Take a look a this image and tell me this is a coincidence

http://screensnapr.com/u/rsoarb.png

I want to block these two specific strings
 
Old 11-08-2010, 02:21 AM   #6
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Are you serving warez? If so, I'm afraid but I can't help.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
PHP optimization & storing compiled files. sanimfj Linux - Server 2 12-17-2009 01:10 PM
Blocking Web crawlers, bots, spiders, proxies, etc from private site areas haydenyoung Linux - Security 3 11-15-2008 11:03 AM
Blocking Harddisk bad sector wood Programming 8 03-30-2005 07:32 AM
.htaccess code for blocking CVS directories mrtwice Linux - Software 1 10-12-2004 01:38 PM
Slackware 9 & i686 optimization hecresper Slackware 1 08-21-2003 06:51 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration