3 ms·
Yeah, I'd wager the firewall has a rule to check against bot traffic, which tend to come from Linux instances. Probably overzealous, sure. Malicious? Doubtful.
by csmattryder 8y ago
Yeah, I'd wager the firewall has a rule to check against bot traffic, which tend to come from Linux instances.
Probably overzealous, sure. Malicious? Doubtful.
- pandemicsyn 8y agoDon't bots typically fake a windows/chrome user agent though? I guess there might be enough low effort bots that just throw up a default platform/curl user agent.
- ahje 8y agoNarh, it's extremely common to see stuff like Firefox 34 for Linux trying to log into WordPress sites a few hundred times per hour. I guess it's old malware that lives on in hacked web sites that the owners abandoned.
- codetrotter 8y agoSuch a firewall could even have learned to block Linux user agents on its own. Similar to how some spam filters learn what email headers are associated with spammers. So if the firewall is seeing a lot of bad traffic with “X11; Linux” in their UA strings and little normal traffic with that in their UA strings then the firewall will take the presence of that as an indicator of possibly bad traffic.
- amenod 8y agoI'm pretty sure they have integration tests to make sure that it doesn't block iOS devices. Not having those tests for common Linux browsers is... Apple.
- trickstra 8y agoany decent bot spoofs the UA string randomly to one of the top 10 most frequent UA strings. That's like a number 2 feature after the one the bot was built for.