306

How to Build a Powerful Reverse Proxy Firewall for Blocking the Evil Web-Scraping Robot Hordes from Hell (cheapskatesguide.org)

submitted 1 year ago by kjo@discuss.tchncs.de to c/selfhosted@lemmy.world

55 comments fedilink hide all child comments

My goals for this firewall were mostly to provide better robot blocking and perhaps some more powerful DDoS protection than my Raspberry Pi 3 web server is capable of delivering. I still have to do some testing before I will know if my new firewall actually provides either of those, but at least I now have the additional ability to run multiple physical web servers on my LAN. Exploring that should be fun, and fun is a very important component of running a home web server.

Not my article. Just sharing.

top 50 comments

sorted by: hot top new old

[-] Auth@lemmy.world 95 points 1 year ago

All this effort to block clankers? Absolutely worth it fuck clankers.

[-] henfredemars@infosec.pub 53 points 1 year ago

I absolutely love the term clankers. It's the perfect blend of dystopian cyberpunk and the very real threat of AI.

[-] Vupware@lemmy.zip 11 points 1 year ago

It seems goofy to me — I wish we had collectively picked a term with more oomph.

I’m struggling to come up with an alternative though.

[-] HeyThisIsntTheYMCA@lemmy.world 9 points 1 year ago

toasters

[-] massacre@lemmy.world 3 points 1 year ago

So say we all.

[-] HeyThisIsntTheYMCA@lemmy.world 4 points 1 year ago

so say we all

[-] No_Eponym@lemmy.ca 2 points 1 year ago

All of this has happened before.

load more comments (1 replies)

[-] addie@feddit.uk 4 points 1 year ago

I'm still trying to make 'sloppers' happen. Perfectly describes the lack of thought that goes into what they produce.

[-] 4grams@awful.systems 11 points 1 year ago

I like 'sloppers' as a term for the morons distrubing and consuming the shit that the clankers are excreting.

[-] anomnom@sh.itjust.works 3 points 1 year ago

Yeah and the make a mess of network traffic that slows everything down.

Sludgers works too, but I like slop for the LLM output, so it makes sense as the bot term of derision.

[-] ICastFist@programming.dev 3 points 1 year ago

clankers make the end result that sloppers (meatbags) eat up ;)

load more comments (3 replies)

[-] BaroqueInMind@piefed.social 33 points 1 year ago

This page isn't loading for me.

[-] Zachariah@lemmy.world 82 points 1 year ago

found the bot

[-] BaroqueInMind@piefed.social 21 points 1 year ago

I'm getting a 404 error, using Cloudflare DNS, who ironically has the best commercial clanker protection in the world, otherwise half the world's internet wouldn't use them

[-] possiblylinux127@lemmy.zip 17 points 1 year ago

Bot

[-] BaroqueInMind@piefed.social 1 points 1 year ago* (last edited 1 year ago)

Not a bot. Both of you can go fuck yourselves with an ENTIRE can of bear mace.

[-] possiblylinux127@lemmy.zip 6 points 1 year ago

Sounds like something a bot would say

[-] AtariDump@lemmy.world 5 points 1 year ago

Using a VPN that you forgot is on?

load more comments (5 replies)

load more comments (3 replies)

[-] jaybone@lemmy.zip 32 points 1 year ago

Should we just move everything to tor and start the Internet over again?

[-] HeyThisIsntTheYMCA@lemmy.world 10 points 1 year ago

look if i can't browse from my fridge i don't want to know about it

[-] zqps@sh.itjust.works 2 points 1 year ago

Not sure about Tor but your fridge definitely supports mesh networks whether it wants to or not.

[-] maxwells_daemon@lemmy.world 7 points 1 year ago

Wait till you hear about betanet

[-] kata1yst@sh.itjust.works 12 points 1 year ago

I was interested until I saw the crypto stakes to vote on changes baked in.

[-] BuboScandiacus@mander.xyz 8 points 1 year ago

Isn't that the new freenet ?

[-] 0_o7@lemmy.dbzer0.com 8 points 1 year ago

No that's alphanet

[-] cryptTurtle@piefed.social 6 points 1 year ago

surely you mean Pipernet

[-] BuboScandiacus@mander.xyz 2 points 1 year ago

Damn it, with their confusing naming !

[-] CephalonKappa@discuss.tchncs.de 4 points 1 year ago

*i2p

[-] quick_snail@feddit.nl 23 points 1 year ago* (last edited 1 year ago)

403 error. Congrats, you built a broken system of false-positives.

[-] gravitywell@sh.itjust.works 12 points 1 year ago

Well it cant be that good becauase it thinks im a bot.

Anubis works pretty well for me so far in blocking clankers.

[-] m33@lemmy.zip 9 points 1 year ago

It seems Anubis’github issues shows many false positives with smartphone browsers. Depending on OP’s target audience it’s worth to hunt for FP

[-] gravitywell@sh.itjust.works 4 points 1 year ago

I just wish i could read it, it seems to block based on my IP which isn't really a good way to identify bots.

[-] m33@lemmy.zip 3 points 1 year ago

Here is a mirror https://git.qiuwen.net.cn/Mirror/anubis handle with care

[-] gravitywell@sh.itjust.works 7 points 1 year ago* (last edited 1 year ago)

Thanks but i meant the site in the original post https://cheapskatesguide.org/articles/debian-netinstall-waf.html

It says

403 Error Your IP address has been blocked. This MAY be because you have made yourself look like a robot by using an unknown VPN or Tor exit node.

[-] rumba@lemmy.zip 7 points 1 year ago

Blocking tor is pretty bold, that network is too slow to use for anything but straight up privacy.

[-] m33@lemmy.zip 2 points 1 year ago

How ironic

I guess you will have to resort to online translators or actual web proxies to read these pages 🙄

[-] SteveTech@programming.dev 2 points 1 year ago

I just used a bot to read it: https://web.archive.org/web/20250901133211/https://cheapskatesguide.org/articles/debian-netinstall-waf.html

[-] 0_o7@lemmy.dbzer0.com 3 points 1 year ago

Here you go: https://web.archive.org/web/20250901133211/https://cheapskatesguide.org/articles/debian-netinstall-waf.html

They seem to block archive.today but not archive.org.

[-] gravitywell@sh.itjust.works 2 points 1 year ago

Oh interesting! Thank you.

[-] m33@lemmy.zip 8 points 1 year ago

And then you have to fill a block list with something like https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

load more comments

this post was submitted on 01 Sep 2025

306 points (98.7% liked)

Selfhosted

62266 readers

396 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.