Ban clients with browser-like user-agent and missing referrer

OpenRailwayMap · May 30, 2024 · 7caff1d · 7caff1d
1 parent 13c28e6
commit 7caff1d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/ansible/roles/tileserver_step2/templates/tiles.openrailwaymap.org.inc b/ansible/roles/tileserver_step2/templates/tiles.openrailwaymap.org.inc
@@ -101,6 +101,12 @@ RewriteCond "%{HTTP_USER_AGENT}" "^Opera/9\."
 RewriteCond "%{HTTP_REFERER}" "^$"
 RewriteRule "." "-" [F]
 
+# User-agent of a browser and no referer
+RewriteCond "%{HTTP_USER_AGENT}" "Gecko/[0-9]+ Firefox/[0-9.]+$"
+# Empty user agents
+RewriteCond "%{HTTP_REFERER}" "^$"
+RewriteRule "." "-" [F]
+
 # Generic user agents
 # Dalvik, an Android HTTP library
 RewriteCond "%{HTTP_USER_AGENT}" "^Dalvik/[0-9.]+ \(Linux; U; Android" [OR]