Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
OTHER License
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Please read updated configuration instructions carefully.
Version 2.2017.05 now introduces 3 new include files called
These 3 new include files allow full control and customization over the scanning of bad referrer words and allows you to have your own customized list of bad IP addresses and ranges and also a custom list of any additional User-Agents you want to block.
The Cyveillance and Berkeley Scanner Sections of globalblacklist.conf have been moved into the blacklist-ips.conf file to allow easier customizations.
PLEASE MAKE SURE TO download these new files AND please update to the latest globalblacklist.conf otherwise Apache will fail a reload without the presence of these new include files.
For those of you using the Auto Update script as a cron it is vital that you make sure the 3 new include files exist on your system otherwise your next auto update will fail reloading Apache when it discovers missing include files.
A very quick fix for this problem is to either download the new include files as per the configuration instructions or to simply do the following.
sudo touch /etc/apache2/custom.d/bad-referrer-words.conf
and
sudo touch /etc/apache2/custom.d/blacklist-ips.conf
and
sudo touch /etc/apache2/custom.d/blacklist-user-agents.conf
This will create 3 blank files so that Apache won't fail the reload. It is better however to download the include files as per the configuration instructions so that you can modify and customize it to your liking instead of starting with a blank file.
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Please read updated configuration instructions carefully.
Version 2.2017.05 now introduces 2 new include files called
These 2 new include files allow full control and customization over the scanning of bad referrer words and allows you to have your own customized list of bad IP addresses and ranges. The Cyveillance and Berkeley Scanner Sections of globalblacklist.conf have been moved into the blacklist-ips.conf file to allow easier customizations.
PLEASE MAKE SURE TO download these new files AND please update to the latest globalblacklist.conf otherwise Apache will fail a reload without the presence of these new include files.
For those of you using the Auto Update script as a cron it is vital that you make sure the two new include files exist on your system otherwise your next auto update will fail reloading Apache when it discovers missing include files.
A very quick fix for this problem is to either download the new include files as per the configuration instructions or to simply do the following.
sudo touch /etc/apache2/custom.d/bad-referrer-words.conf
and
sudo touch /etc/apache2/custom.d/blacklist-ips.conf
This will create 2 blank files so that Apache won't fail the reload. It is better however to download the include files as per the configuration instructions so that you can modify and customize it to your liking instead of starting with a blank file.
Published by mitchellkrogza over 7 years ago
Please read updated configuration instructions carefully.
Version 2.2017.05 now introduces 2 new include files called
These 2 new include files allow full control and customization over the scanning of bad referrer words and allows you to have your own customized list of bad IP addresses and ranges. The Cyveillance and Berkeley Scanner Sections of globalblacklist.conf have been moved into the blacklist-ips.conf file to allow easier customizations.
PLEASE MAKE SURE TO download these new files AND please update to the latest globalblacklist.conf otherwise Apache will fail a reload without the presence of these new include files.
For those of you using the Auto Update script as a cron it is vital that you make sure the two new include files exist on your system otherwise your next auto update will fail reloading Apache when it discovers missing include files.
A very quick fix for this problem is to either download the new include files as per the configuration instructions or to simply do the following.
sudo touch /etc/apache2/custom.d/bad-referrer-words.conf
and
sudo touch /etc/apache2/custom.d/blacklist-ips.conf
This will create 2 blank files so that Apache won't fail the reload. It is better however to download the include files as per the configuration instructions so that you can modify and customize it to your liking instead of starting with a blank file.
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Regex changes to the Bad Referers section due to false positives.
Old Regex Patterns
SetEnvIfNoCase Referer "ads.gold" spam_ref=1
SetEnvIfNoCase Referer "chee-by.biz" spam_ref=1
SetEnvIfNoCase Referer "xn--1-8sbcpb0bdm8k6a.xn--p1ai" spam_ref=1
New Regex Patterns
SetEnvIfNoCase Referer "~*ads\.gold" spam_ref=1
SetEnvIfNoCase Referer "~*chee\-by\.biz" spam_ref=1
SetEnvIfNoCase Referer "~*xn\-\-1\-8sbcpb0bdm8k6a\.xn\-\-p1ai" spam_ref=1
Introduced as per Issue: https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker/issues/22
Thank You to @MediaSnog
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago
Published by mitchellkrogza over 7 years ago