CODEWITHSUNDEEP
mod-rewrite
Raymond Barneveld
Raymond Barneveld

Reputation: 1

Mod_rewrite blockung mass requests

I run a spotweb website and some people like to get it down by mass requests. A request is like:

`https://www.example.com/?page=getnzb&action=display&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]`

After 40 request/second my VPS said: bey bey apache and is offline. I try to block this mass requests with the .htaccess:

`# Block requests containing specific query parameters
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{QUERY_STRING} (^|&)messageid\%5B\%5D= [NC]
RewriteRule ^ - [F,L]
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On

# Block requests containing specific query parameters
RewriteCond %{QUERY_STRING} (^|&)messageid\%5B\%5D= [NC]
RewriteRule ^ - [F,L]
</IfModule>`

But this requests doesent kill. How to kill this request sending them to localhost ore something that the VPS will be alive?

ISPmanager (apache + nginx)

For now I add manual the IP into the cloudflare firewall but the next IP is there. Thanks

Helping with the golden code

Upvotes: 0

Views: 14

Answers (0)

Related Questions