4 ms·
I return a 403 if User-Agent or Host headers are missing. And my firewall will lock you out completely if you use "User-agent" instead of "User-Agent" (among ma
by jackalope 14y ago
I return a 403 if User-Agent or Host headers are missing. And my firewall will lock you out completely if you use "User-agent" instead of "User-Agent" (among many other obvious giveaways in the User-Agent header).
- icebraining 14y agoWhy?
- jackalope 14y agoI block anything that looks like penetration testing or content scraping if there's no chance of false positives. Even when there's no vulnerability present, it conserves resources on dynamically generated sites.
- deleted 14y ago[deleted]
- dredmorbius 14y agoWhy I can appreciate that, why not block based on patterns of use rather than headers?