From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Nikolai Dahlem" Subject: limit HTTP-GET requests per IP Date: Fri, 30 Jan 2004 14:00:47 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0004_01C3E739.75F357E0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0004_01C3E739.75F357E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Hi, I got a problem. Various people are stupidly trying to mirror my webserver (wget and the like), which puts heavy load on it, due to the dynamic generation of pages. Is there a way to specify a limit on requests per second on an ip basis ? This is a public server, so a limit rule for each ip would be a bit too much [2^32 too much ;-)] One other idea is parsing the http-log an inserting rules dynamically. Any suggestions on how to solve this ? regards Nikolai ------=_NextPart_000_0004_01C3E739.75F357E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

I got = a problem.=20 Various people are stupidly trying to mirror my webserver (wget and the = like),=20 which puts heavy load on it, due to the dynamic generation of pages. Is = there a=20 way to specify a limit on requests per second on an ip basis=20 ?

This = is a public=20 server, so a limit rule for each ip would be a bit too much [2^32 too = much=20 ;-)]

One = other idea is=20 parsing the http-log an inserting rules dynamically.

Any = suggestions on=20 how to solve this ?

regards

Nikolai

------=_NextPart_000_0004_01C3E739.75F357E0--