Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. HEY MASTODON SERVER/INSTANCE ADMINS:

HEY MASTODON SERVER/INSTANCE ADMINS:

Scheduled Pinned Locked Moved Uncategorized
cybersecuritymastodonselfhosted
2 Posts 2 Posters 4 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • jordan@mastodon.subj.amJ This user is from outside of this forum
    jordan@mastodon.subj.amJ This user is from outside of this forum
    jordan@mastodon.subj.am
    wrote last edited by
    #1

    HEY MASTODON SERVER/INSTANCE ADMINS:

    ISSUE:
    I found that my Masto instance was being completely *hammered* with bot crawlers from Meta, Apple and others.

    My server is *just me* at the moment so not only is this kind of activity uncalled for, but many requests are for politically sensitive hashtags, users, etc..

    SOLUTION:
    Using fail2ban, I customized the 'nginx-badbots' filter (https://gist.github.com/dale3h/660fe549df8232d1902f338e6d3b39ed) to also include 'meta-externalagent' and 'applebot'.

    #cybersecurity #mastodon #selfhosted

    retech@defcon.socialR 1 Reply Last reply
    1
    0
    • jordan@mastodon.subj.amJ jordan@mastodon.subj.am

      HEY MASTODON SERVER/INSTANCE ADMINS:

      ISSUE:
      I found that my Masto instance was being completely *hammered* with bot crawlers from Meta, Apple and others.

      My server is *just me* at the moment so not only is this kind of activity uncalled for, but many requests are for politically sensitive hashtags, users, etc..

      SOLUTION:
      Using fail2ban, I customized the 'nginx-badbots' filter (https://gist.github.com/dale3h/660fe549df8232d1902f338e6d3b39ed) to also include 'meta-externalagent' and 'applebot'.

      #cybersecurity #mastodon #selfhosted

      retech@defcon.socialR This user is from outside of this forum
      retech@defcon.socialR This user is from outside of this forum
      retech@defcon.social
      wrote last edited by
      #2

      @jordan On my host plan I cannot implement Fail2Ban (really wish I could, this is the way to go.) But these two cases are also fairly easy to stop in htaccess.

      1 Reply Last reply
      0
      • R relay@relay.infosec.exchange shared this topic
      Reply
      • Reply as topic
      Log in to reply
      • Oldest to Newest
      • Newest to Oldest
      • Most Votes


      • Login

      • Login or register to search.
      • First post
        Last post
      0
      • Categories
      • Recent
      • Tags
      • Popular
      • World
      • Users
      • Groups