4 ms·
That doesn't necessarily mean they are willingly blocking linux, I've seen inconspicuous user agent strings triggering 502 errors before. It's just badly writte
by cedivad 8y ago
That doesn't necessarily mean they are willingly blocking linux, I've seen inconspicuous user agent strings triggering 502 errors before. It's just badly written code.
- csmattryder 8y agoYeah, I'd wager the firewall has a rule to check against bot traffic, which tend to come from Linux instances. Probably overzealous, sure. Malicious? Doubtful.
- pandemicsyn 8y agoDon't bots typically fake a windows/chrome user agent though? I guess there might be enough low effort bots that just throw up a default platform/curl user agent.
- ahje 8y agoNarh, it's extremely common to see stuff like Firefox 34 for Linux trying to log into WordPress sites a few hundred times per hour. I guess it's old malware that lives on in hacked web sites that the owners abandoned.
- codetrotter 8y agoSuch a firewall could even have learned to block Linux user agents on its own. Similar to how some spam filters learn what email headers are associated with spammers. So if the firewall is seeing a lot of bad traffic with “X11; Linux” in their UA strings and little normal traffic with that in their UA strings then the firewall will take the presence of that as an indicator of possibly bad traffic.
- amenod 8y agoI'm pretty sure they have integration tests to make sure that it doesn't block iOS devices. Not having those tests for common Linux browsers is... Apple.
- trickstra 8y agoany decent bot spoofs the UA string randomly to one of the top 10 most frequent UA strings. That's like a number 2 feature after the one the bot was built for.
- tyingq 8y agoIt's curious though, that the thread narrows it down to "X11; Linux", with that specific casing (update: nope, not case sensitive). Changing or removing any single char in that string stops the error.
- cedivad 8y agoThey most likely had a reason to threat those people differently and a bug came up under that special case ;) Watch them fix it.
- floatingatoll 8y agoWhat browsers on Linux produce a User-agent containing that exact string _by default_, without user customization? EDIT: Elsewhere in thread confirms Firefox and Chrome affected on lots of Linux.
- lloeki 8y ago
- kalleboo 8y agoA service we use has just started banning logins from the whole country of Japan on their cloudflare, just about to contact them about this. At this point I'm still willing to assume it's an automated filter gone wild and not some odd xenophobia