The advantage of this script is that it directly monitors the IPs using netstat so one could stop bots from hammering things other than your webserver, say socket connections.
It is customizable to use APF or iptables and worked quite well when one of my friend's site was hit.
Re:Very simple bot blocking utility in php and iptables
by jacquesm on Tuesday July 07, 2009 @03:32AM
(#691086)
Neat!
Thank you, I'll definitely look in to it. The biggest problem with blocking bots is false positives, identifying and giving a pass to your real users. It's a surprisingly hard problem, bot writers are quite clever when it comes to masquerading as real users.
The advantage of this script is that it directly monitors the IPs using netstat so one could stop bots from hammering things other than your webserver, say socket connections.
It is customizable to use APF or iptables and worked quite well when one of my friend's site was hit.
Thank you, I'll definitely look in to it. The biggest problem with blocking bots is false positives, identifying and giving a pass to your real users. It's a surprisingly hard problem, bot writers are quite clever when it comes to masquerading as real users.
It's not the most elegant solution and I'm sure the code can be improved upon but it does the job.