From b8d57db06bbf4559358b75a06e0e76aa244c4984 Mon Sep 17 00:00:00 2001 From: Matt Amos Date: Wed, 10 Aug 2016 16:07:30 +0100 Subject: [PATCH 1/1] Add some more blocks - these are currently 7% of total usage. --- cookbooks/tilecache/templates/default/squid.conf.erb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/cookbooks/tilecache/templates/default/squid.conf.erb b/cookbooks/tilecache/templates/default/squid.conf.erb index 2c016be02..2b446f9a0 100644 --- a/cookbooks/tilecache/templates/default/squid.conf.erb +++ b/cookbooks/tilecache/templates/default/squid.conf.erb @@ -23,6 +23,8 @@ acl osmtileScrapers browser MSIE.7\.0.*Windows.NT.5\.1.*2\.0\.50727.$ acl osmtileScrapers browser MSIE.5.5 acl osmtileScrapers browser ^LoadOSM\.exe$ acl osmtileScrapers browser ^app_name$ +acl osmtileScrapers browser ^osmdroid$ # app using osmdroid library not setting app-specific User-Agent +acl osmtileScrapers browser ^Mozilla/5.0 (Windows NT 5.1)$ # Faked User-Agent http_access deny osmtile_sites osmtileScrapers @@ -31,6 +33,12 @@ acl osmtileOverusers referer_regex ^https?://[^.]*\.pmap\.kuku\.lu/ http_access deny osmtile_sites osmtileOverusers +# Block when neither the referer nor User-Agent is set - policy requires some identification of the site / app. +acl has_referer referer_regex . +acl has_user_agent browser_regex . + +http_access deny osmtile_sites !has_referer !has_user_agent + acl whitelist_path urlpath_regex ^/cgi-bin/(export|debug) acl blacklist_path urlpath_regex ^/cgi-bin/ acl blacklist_path urlpath_regex ^/MyAdmin/ -- 2.43.2