top | item 690608

Very simple bot blocking utility in php and iptables

4 points| jacquesm | 16 years ago |ww.com | reply

3 comments

order
[+] mindhacker|16 years ago|reply
I use this script for similar purpose - http://www.inetbase.com/scripts/ddos/install.ddos

The advantage of this script is that it directly monitors the IPs using netstat so one could stop bots from hammering things other than your webserver, say socket connections.

It is customizable to use APF or iptables and worked quite well when one of my friend's site was hit.

[+] jacquesm|16 years ago|reply
Neat!

Thank you, I'll definitely look in to it. The biggest problem with blocking bots is false positives, identifying and giving a pass to your real users. It's a surprisingly hard problem, bot writers are quite clever when it comes to masquerading as real users.