Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: legg Newsgroups: sci.electronics.design Subject: Re: Chinese downloads overloading my website Date: Tue, 12 Mar 2024 09:41:24 -0400 Organization: A noiseless patient Spider Lines: 27 Message-ID: References: <7qujui58fjds1isls4ohpcnp5d7dt20ggk@4ax.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Injection-Info: dont-email.me; posting-host="ac816da389ab38876de990b7a08afd3f"; logging-data="344890"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19CLJRzUvNRCBhGeed3V/BD" Cancel-Lock: sha1:6Vh+VZ13vCF5aDT6GUkuVnXOBQY= X-Newsreader: Forte Agent 4.2/32.1118 Bytes: 1953 On Tue, 12 Mar 2024 12:54:06 +0000, Peter wrote: >IME, the hidden google re-captcha works brilliantly against bots. >Presumably by examining the timing. Set the threshold to 0.6 and off >you go. I run a fairly busy tech forum. > >Another approach is to put your site behind Cloudflare. For hobby / >noncommercial sites this is free. And you get handy stuff like > >- https certificate is done for you >- you can block up to 5 countries (I blocked Russia China and India) > >Ideally you should firewall your server to accept web traffic only >from the set of CF IPs, but in practice this is not necessary unless >somebody is out to get you (there are websites which carry IP history >for a given domain, believe it or not!!!) My ISP has finally blocked all China IP addresses from accessing the site. Maybe that's what the bots want; who knows. Haven't had access to the site to find out what the practical result is, yet. RL