Block nuisance requests in order to save server resources and have cleaner logs #100

New issue

Open

opened 2020-01-06 04:17:37 +00:00 by mlncn · 1 comment

mlncn commented

2020-01-06 04:17:37 +00:00

(Migrated from gitlab.com)

The latest annoying thing in the logs (at Eliot School) is 404s for autodiscover/autodiscover.xml which are malicious bots probing to see if we're running a blinking Microsoft Exchange e-mail server.

@wolcen we could have a special line in .htaccess or elsewhere in Apache that reads from a file (similar to what you do for redirects), that we could manually git pull sync within each project, as an MVP for this.

Notes here, but not meaningful: https://agaric.gitlab.io/raw-notes/notes/2020-01-05-block-attempts-to-probe-nonexistent-files-to-keep-them-out-of-application-logs-and-processing-time/

Posting here in a public project because i think we could get a little momentum going around this. Interestingly the place i found the most straightforward of possible (pretty bad) solutions is from an Acquia page, suggesting that maybe Wordfence for WordPress and other projects solve this more elegantly than Drupal? Or that other projects are mostly installed places where people never look at the logs, heh.

The latest annoying thing in the logs (at Eliot School) is 404s for autodiscover/autodiscover.xml which are malicious bots probing to see if we're running a blinking Microsoft Exchange e-mail server. @wolcen we could have a special line in .htaccess or elsewhere in Apache that reads from a file (similar to what you do for redirects), that we could manually `git pull` sync within each project, as an MVP for this. Notes here, but not meaningful: https://agaric.gitlab.io/raw-notes/notes/2020-01-05-block-attempts-to-probe-nonexistent-files-to-keep-them-out-of-application-logs-and-processing-time/ Posting here in a public project because i think we could get a little momentum going around this. Interestingly the place i found the most straightforward of possible (pretty bad) solutions is from an Acquia page, suggesting that maybe Wordfence for WordPress and other projects solve this more elegantly than Drupal? Or that other projects are mostly installed places where people never look at the logs, heh.

mlncn commented

2020-01-06 04:17:38 +00:00

(Migrated from gitlab.com)

changed weight to 3

changed weight to **3**

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: geo/geo-coop#100

No description provided.

Rows
Columns