Le 01/11/16 à 21:51, Richard Heck a écrit :
What about rate limiting access to the trac/ subdirectory? The problem
is that we get hit too many times too fast by these bots. Refusing to
serve them that fast won't make them go away, but it will keep them from
taking us down.
Do you know how to do that? I am not sure that trac is the only problem,
BTW.
And what is the reasonable limit?
I had some suggestions from Máté: limit the number of connections from
the same IP. IPTables can do this:
http://unix.stackexchange.com/questions/139285/limit-max-connections-per-ip-address-and-new-connections-per-second-with-iptable
Máté suggested a limit of 2 connections per IP.
I have no idea how to do this properly, though.
JMarc
