From a42904fb7a02fe569ef6b72dd88f7e7ee8deb0b1 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 19 Feb 2026 20:34:29 +0000 Subject: [PATCH] Add bogus user agent block --- cookbooks/web/templates/default/apache.frontend.erb | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/cookbooks/web/templates/default/apache.frontend.erb b/cookbooks/web/templates/default/apache.frontend.erb index c48f454fe..2aee03373 100644 --- a/cookbooks/web/templates/default/apache.frontend.erb +++ b/cookbooks/web/templates/default/apache.frontend.erb @@ -128,6 +128,13 @@ ErrorLog /var/log/apache2/error.log RewriteCond %{HTTP_REFERER} "^https://<%= Regexp.escape(node[:fqdn]) %>/" RewriteRule . - [F,L] + # + # Block bogus user agents + # + RewriteCond %{SERVER_PROTOCOL} =HTTP/1.1 + RewriteCond %{HTTP_USER_AGENT} Chrome/((103|105|107|108|109|110|111|112|116|117|120|124|131|133)\.0\.0\.0|104\.0\.5112\.81|106\.0\.5249\.119) [NC] + RewriteRule . - [F,L] + # # Force special MIME type for crossdomain.xml files # -- 2.39.5