The Spammers Don’t Like Me.
Within moments of enabling very strong global anti-spam measures, this particular website was put under severe denial of service attack. Apparently I didn’t clamp down the throttle enough, but now I’m limiting my own personal website to five document requests per every five seconds, considerably tighter than any other website on the server.
I finally figured out how to interface Jay Allen’s blacklist with mod_security today, all the while filtering only dynamic pages instead of all requests, and to top it off, I was able to turn the filtering off for cms entry posting pages, so users aren’t being filtered for writing about the evil spam bastards. As an added benefit, referrer spam is also going to be cut down, as the same blacklist is being used to block referrers from attempting to access dynamicly generated pages.
It is so very infuriating that there have been fourteen server fails recorded by the monitoring service and each one was due to comment/trackback spam attacks. The very sucky part of it is that each fail is recorded as a minimum of five minutes down, even though nearly always it is considerably less than five minutes; that means the server is recorded as being down for a total of approximately 1 hour and ten minutes during the month of February. It certainly hasn’t been down that long, but that is, afterall, what the records will show! I am not happy about this at all.
Now, hmmm… all that remains is making sure the blacklist automatically updates everyday as it should (which I’m not sure if it did today as it was supposed to), and I also need to finally finish the ‘re-branding project’ that is pretty much finished, but, egh… not live yet. I’ve been very, very lazy about work the past two weeks… hmmm, I wonder why? ;) Could it be that I’ve had something much, much better to be focusing my energy on? Yea, I think that is it.
February 21st, 2005 at 1:14 am
I’m curious … are you being hammered like crazy by referrer spammers? There are times when the bots conspire to really drive Apache nuts.
Referral spam is pretty mindlessly stupid stuff. :sigh:
February 21st, 2005 at 3:31 pm
I wouldn’t say hammered like crazy, but there’s certainly a lot of referrer spam. I practically never look at the stats and thus don’t care, but I figured… stoping the spammers from even pulling the page if their referrer is on a blacklist and it’ll help even more, makes sense? Well, I hope so anyway.
My biggest problem is that fucking Movable Type, and it spawning eight bazillion threads to process the comment spam at the same moment. Load goes 1 to 200 in a matter of seconds.