[fpc-devel] wiki slow

[wkitty42 at windstream.net]

On 2/23/25 6:19 AM, Jonas Maebe via fpc-devel wrote:
> On 22/02/2025 18:40, Werner Pamler via fpc-devel wrote:
>> Am 22.02.2025 um 09:25 schrieb Jonas Maebe via fpc-devel:
>>> Many of them have been blacklisted automatically already by fail2ban. I'll 
>>> manually blacklist all of their IP ranges now.
>> Thank you. It's working again.
> 
> They're not giving up...
> 
> 3     135K 8094K REJECT     all  --  *      *       0.0.0.0/0 
> 0.0.0.0/0            source IP range 47.74.0.0-47.87.255.255 reject-with 
> icmp-port-unreachable
> 
> (the 135K is the number of packets, the 8098K is the number of bytes)

FWIW: instead of rejecting, i would drop... that way their networking stack has 
to wait on timeouts and adds a delay load to their stuff... dropping also makes 
you "invisible" to them... with your rejects, your (icmp) responses tell them 
the system still exists, so they keep hammering...


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list where it belongs!*