On Wed, Feb 2, 2011 at 9:24 AM, Martin Langhoff <span dir="ltr"><<a href="mailto:martin.langhoff@gmail.com">martin.langhoff@gmail.com</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On Tue, Feb 1, 2011 at 6:28 PM, Anna <<a href="mailto:aschoolf@gmail.com">aschoolf@gmail.com</a>> wrote:<br>
> My test XS at home has a FQDN and is open to the outside. Therefore this is<br>
> probably a pretty rare issue in XS land, but I thought I'd ask.<br>
<br>
</div>In general, I'd keep it closed. It's not designed as a full internet server.<br>
<div class="im"><br>
</div></blockquote><div><br>I do try to stay under the radar as much as possible. I don't post the URL anywhere. I'm not even listed on the wiki as a Jabber server, relying on word of mouth. And what fun is having an XO chat server if other folks can't join in? Also, playing around with Moodle and Statusnet and stuff like that is a lot more fun when there are other users.<br>
<br> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im">
> Here's my question - is the XS networking going to get wonky with 894 extra<br>
> iptables rules?<br>
<br>
</div>Short answer - no.<br>
<br></blockquote><div><br>Great! I'm very glad to hear that.<br><br>I still had bots with empty user agent strings originating from the UK, US, Italy, Spain, etc. And I wanted to go ahead and block all bots who identify themselves as such.<br>
<br>I put this in /var/www/html/.htaccess<br><br>SetEnvIf User-Agent ^-$ block=1<br>SetEnvIf User-Agent ^$ block=1<br>SetEnvIfNoCase User-Agent "(bot|spider|spyder|yahoo)" block=1<br>Order allow,deny<br>Allow from all<br>
Deny from env=block<br><br>Now all blank user agent strings and even Googlebot get a 403. (The User Agent Switcher addon for Firefox is quite handy to test that with.) I'll probably have to add to the user agent list, but that should take care of most of it for now.<br>
<br>Anna Schoolfield<br>Birmingham<br></div></div>