I found a list of things to block in .htaccess, Good idea or not?

Discussion in 'Security' started by webtarded, Mar 7, 2008.

  1. #1
    webtarded, Mar 7, 2008 IP
  2. cooldude7273

    cooldude7273 Active Member

    Messages:
    185
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    55
    #2
    Give us a link NOT through a proxy please so we can actually see the site. :)
     
    cooldude7273, Mar 7, 2008 IP
  3. webtarded

    webtarded Peon

    Messages:
    211
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #3
    webtarded, Mar 8, 2008 IP
  4. boltok

    boltok Active Member

    Messages:
    257
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    78
    #4
    Probably not a good idea to use all of these. Some of them (such as "Java", "Jakarta" and "Python-urllib") could be from legit sites trying to index or check yours.
     
    boltok, Mar 9, 2008 IP
  5. joebert

    joebert Well-Known Member

    Messages:
    2,150
    Likes Received:
    88
    Best Answers:
    0
    Trophy Points:
    145
    #5
    Unless you're already getting these user-agent strings showing up in your logs, banning them is actually slowing the site down for no reason.

    Every single request gets ran through that list to see if there's a match. If a page has 10 images on it, that's 11 times the user-agent is being checked for that one page request. Doesn't seem like alot untill you consider 1,000 visitors looking at 5 pages each with 10 images on them equates to 51,000 checks times the 179 user-agents in that list which is 9,129,000 tests being done for those 1,000 requests. That doesn't even take into account things like external stylesheets and scripts.

    Now, if you're not currently seeing any of those user-agents listed in your log files eating up bandwidth, that means you have 9,129,000 tests being done for no reason.

    Watch your log files, add measures like that as they're needed.
     
    joebert, Mar 17, 2008 IP