aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon Paillard <spaillard@debian.org>2013-08-29 22:40:23 +0200
committerSimon Paillard <spaillard@debian.org>2013-08-29 22:40:23 +0200
commitdd285c72ad40bfab24f5e38623be64f3472f1089 (patch)
tree8b84e364ccb6b8cfe80b7034147805ff6579850a
parent07acf0c4a8b067bb2d47db48dcc4f8c0185846cd (diff)
Ban check_http hits on 1MB files (Closes: #720970)
Patch-by: Csillag Tamas <cstamas@digitus.itk.ppke.hu>
-rw-r--r--conf/apache.conf.sed.in9
1 files changed, 9 insertions, 0 deletions
diff --git a/conf/apache.conf.sed.in b/conf/apache.conf.sed.in
index 0a6d42c..957dc1f 100644
--- a/conf/apache.conf.sed.in
+++ b/conf/apache.conf.sed.in
@@ -80,6 +80,15 @@
allow from all
</Location>
+ <LocationMatch /stable/allpackages.*>
+ SetEnvIfNoCase User-Agent check_http keep_out ErrorDocument 403 "what are you doing here? - tell us webmaster@debian.org"
+ <limit GET>
+ Order Allow,Deny
+ Allow from all
+ Deny from env=keep_out
+ </limit>
+ </LocationMatch>
+
BrowserMatch reportbug is_reportbug
RewriteEngine on