From dd285c72ad40bfab24f5e38623be64f3472f1089 Mon Sep 17 00:00:00 2001
From: Simon Paillard <spaillard@debian.org>
Date: Thu, 29 Aug 2013 22:40:23 +0200
Subject: Ban check_http hits on 1MB files (Closes: #720970)

Patch-by: Csillag Tamas <cstamas@digitus.itk.ppke.hu>
---
 conf/apache.conf.sed.in | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/conf/apache.conf.sed.in b/conf/apache.conf.sed.in
index 0a6d42c..957dc1f 100644
--- a/conf/apache.conf.sed.in
+++ b/conf/apache.conf.sed.in
@@ -80,6 +80,15 @@
       allow from all
    </Location>
 
+   <LocationMatch /stable/allpackages.*>
+      SetEnvIfNoCase User-Agent check_http keep_out                                                                                                                                                    ErrorDocument 403 "what are you doing here? - tell us webmaster@debian.org"
+      <limit GET>
+         Order Allow,Deny
+         Allow from all
+         Deny from env=keep_out
+      </limit>
+   </LocationMatch>
+
    BrowserMatch reportbug is_reportbug
 
    RewriteEngine on
-- 
cgit v1.2.3