| 22 Jul 2025 |
 jonhermansen | I added trenchbroom to my system packages and it blew everything up because of this throw, so I went down the rabbithole.
pkgs/by-name/li/libjpeg_turbo/package.nix: dev_private = throw "not supported anymore";
Anyways, thanks for the help, I'll use search.nixos.org next time | 19:07:35 |
| 24 Jul 2025 |
 cleverca22 | my hydra is being swamped by some kind of scrapper/bot/ddos
they are just recursively following every link on every page, ignoring robots.txt, and causing performance problems
user-agents are total garbage, even claiming to be things like macos on ppc, or linux on ppc
no cookies
every ip hits me up once, and then never comes back!
what can be done to block this kind of garbage? | 15:21:14 |
 ma27 | I essentially stole https://github.com/NixOS/infra/blob/7ee3f5c95beda825b742580178f84034ec48aa9c/non-critical-infra/hosts/staging-hydra/hydra-proxy.nix#L9 | 15:25:41 |
| ma27 | and it's working surprisingly well | 15:25:49 |
| cleverca22 | hmmm, i'm getting some like:
Mozilla/5.0 (iPod; U; CPU iPhone OS 4_3 like Mac OS X; as-IN) AppleWebKit/532.43.7 (KHTML, like Gecko) Version/3.0.5 Mobile/8B119 Safari/6532.43.7
Opera/9.82.(X11; Linux i686; mg-MG) Presto/2.9.176 Version/11.00
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_11_5; rv:1.9.5.20) Gecko/3574-09-12 00:50:37.474434 Firefox/3.6.2
Mozilla/5.0 (X11; U; Linux ppc; fr; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12
| 15:27:13 |
| cleverca22 | i do see ipod in the list you linked | 15:28:05 |
| cleverca22 | let me see what happens if i apply that..... | 15:28:30 |
| cleverca22 | ma27: yep, i can confirm, traffic is now 403'ing and going to abuse.log! | 15:34:48 |
| cleverca22 | some still slips thru though, but i could tweak the regex to improve that | 15:35:06 |
| cleverca22 | even with the small bits that slip thru, the machine is basically idle now, so its all good | 16:05:22 |
 Sandro 🐧 | That list at least put Samsung Mobile Browsers out because they are on Chromium 130 🙃 | 23:13:55 |
