prologic-twtxt-atom-feed 

feeds.twtxt.net

No description provided.

Recent twts from prologic-twtxt-atom-feed
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#cmttsmq) Note for reference I was trying to write and fix this rule (fixed version below):

# Ignore Content-Type restrictions for Git
S ...**
Note for reference I was trying to write and fix this rule ( _fixed version below_):
Ignore Content-Type restrictions for Git

SecRule REQUEST_HEADERS:Host “@streq git.mills.io” “id:101,phase:1,t:none,nolog,ctl:ruleRemoveById=920420”

⌘ [Read more](https://twtxt.net/twt/n4ipixa)

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

(#cmttsmq) I’ll try to add a README for caddy-waf soon™ (going back to bed now) at least document the customizations I’ve made to this WAF ( …
I’ll try to add a README for caddy-waf soon™ ( going back to bed now) at least document the customizations I’ve made to this WAF ( which I forked from caddy-coraza) ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#cmttsmq) This is how I build my caddy:

proxy-1:~# cat build.caddy.sh
#!/bin/sh

xcaddy build \
	--with github.com/caddy-dns/cloudflare \
 ...**
This is how I build my caddy:

proxy-1:~# cat build.caddy.sh
#!/bin/sh

xcaddy build 

--with github.com/caddy-dns/cloudflare \
--with github.com/caddyserver/cache-handler \
--with git.mills.io/prologic/caddy-ratelimit \
--with git.mills.io/prologic/caddy-waf

proxy-1:~#

⌘ [Read more](https://twtxt.net/twt/dokh7ca)

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#cmttsmq) Ahh fuck! Sorry I was fixing a rule 🤣 This is much better!

proxy-1:~# grep -c 'Bad ASN' /var/log/caddy/caddy.log
2441
```**
Ahh fuck! Sorry I was fixing a rule 🤣 This is **much** better!

proxy-1:~# grep -c ‘Bad ASN’ /var/log/caddy/caddy.log
2441

”` ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#cmttsmq) @bender@bender Yes they are rather large 🤣 Here you go:

proxy-1:~# cat /etc/caddy/waf/bad_asns.txt
# CHINANET-BACKBONE No. ...**
[@bender](https://twtxt.net/user/bender/) Yes they are rather large 🤣 Here you go:

proxy-1:~# cat /etc/caddy/waf/bad_asns.txt

CHINANET-BACKBONE No.31,Jin-rong Street, CN Why: DDoS

4134

CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN Why: DDoS

4837

CHINAMOBILE-CN China Mobile Communications Group Co., Ltd., CN Why: DDoS

9808

FACEBOOK, US Why: Bad Bots

32934
proxy-1:~ … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#cmttsmq) @bender@bender AS Number):

An autonomous system (AS) is a collection of connected Internet Protocol (IP) routing prefixes under …**
@bender AS Number:

An autonomous system (AS) is a collection of connected Internet Protocol (IP) routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain, that presents a common and clearly defined routing policy to the Internet.[ … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

It’s nice to see that some Crawlers actaully respect rate limits and respect a 429 Too many requests response 👌 Thank you Google! 🙌 …
It’s nice to see that some Crawlers actaully respect rate limits and respect a 429 Too many requests response 👌 Thank you Google! 🙌 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

(#tw5ulrq) @bender@bender you’re right the scale wasn’t that large, but analyzing the logs. It definitely was a detox attack. 🤣 I woke up …
@bender you’re right the scale wasn’t that large, but analyzing the logs. It definitely was a detox attack. 🤣 I woke up this morning to see six other small spikes like this which I’ll have to analyze later tonight… ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**So I need to figure out how to block ASN(s)…

Additionally, I’ thinking of; How to detect DDoS attachs?

Here’s one way I’ve come up that’s qu …**
So I need to figure out how to block ASN(s)…

Additionally, I’ thinking of; How to detect DDoS attachs?

Here’s one way I’ve come up that’s quite simple:

Detecting DDoS attacks by tracking requests across multiple IPs in a sliding window. If total requests exceed a threshold in a given time, flag as potential DDoS. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

For the time being… I’ve just blocked all of OpenAI(s) Bots. They (thankfully) publish a JSON endpoint that you can use to block all OpenAI …
For the time being… I’ve just blocked all of OpenAI(s) Bots. They ( thankfully) publish a JSON endpoint that you can use to block all OpenAI crawlers from reaching your server ( in my case, blocking it at the edge). Example:

proxy-1:~# curl -qs https://openai.com/gptbot.json | jq -r '.prefixes[].ipv4Prefix' | xargs -I{} ./block-ip.sh {}

Where … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#buvh2sa) @aelaraji Yes! 👏 This is exactly what it is! 🤣 I will of course soon™ be hosting this service, likely at validator.twtxt.net ...** [@aelaraji _@aelaraji.com_](https://twtxt.net/external?uri=https://aelaraji.com/twtxt.txt&nick=aelaraji) Yes! 👏 This is exactly what it is! 🤣 I will of course soon™ be hosting this service, likely atvalidator.twtxt.net😅😅 ⌘ [Read more](https://twtxt.net/twt/rmyrhwq)

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

(#f26jg3a) @kat Haha 🤣 If someone figures this out, please let me know 🙏🙏 – In the meantime, I’m going to very soon™ write a daemon …
@kat @yarn.girlonthemoon.xyz Haha 🤣 If someone figures this out, please let me know 🙏🙏 – In the meantime, I’m going to very soon™ write a daemon that will watch the audit log for repeated violations and add to the network firewall. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**(#4nndfsa) This is better:

proxy-1:~# ./audit-log-by-ip.sh 4.227.36.76 | coraza-log-formatter -m -
2025/01/04 23:17:04 4.227.36.76 58982 GE ...**
This is better:

proxy-1:~# ./audit-log-by-ip.sh 4.227.36.76 | coraza-log-formatter -m -
2025/01/04 23:17:04 4.227.36.76 58982 GET /external?aff-HY0BLO=&f=mediaonly&f=noreplies&nick=g1n&uri=https%3A%2F%2Fthe-president-codes.linegames.org null 0 On OWASP_CRS/4.7.0
Actionset: OWASP_CRS/4.7.0
Message: Bad User Agent
Severity: 0
Raw: SecRule REQUEST_HEADERS:User-Agent “@pmFromFile /etc/cadd … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (19w ago)

**Nice! I wrote another useful tool 👌

proxy-1:~# ./audit-log-by-ip.sh 4.227.36.76 | coraza-log-formatter -m -
Actionset: OWASP_CRS/4.7.0
M ...**
Nice! I wrote another useful tool 👌

proxy-1:~# ./audit-log-by-ip.sh 4.227.36.76 | coraza-log-formatter -m -
Actionset: OWASP_CRS/4.7.0
Message: Bad User Agent
Severity: 0
Raw: SecRule REQUEST_HEADERS:User-Agent “@pmFromFile /etc/caddy/waf/bad_user_agents.txt” “id:2000,log,phase:1,deny,msg:‘Bad User Agent’”

⌘ [Read more](https://twtxt.net/twt/4nndfsa)

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

**How in da fuq do you actually make these fucking useless AI bots go way?

proxy-1:~# jq '. | select(.request.remote_ip=="4.227.36.76")' /v ...**
How in da fuq do you _actually_ make these fucking useless AI bots go way?

proxy-1:~# jq ‘. | select(.request.remote_ip==“4.227.36.76”)’ /var/log/caddy/access/mills.io.log | jq -s ‘. | last’ | caddy-log-formatter -
4.227.36.76 - [2025-01-05 04:05:43.971 +0000] “GET /external?aff-QNAXWV=&f=mediaonly&f=noreplies&nick=g1n&uri=https%3A%2F%2Fmy-hero-ultra-impact-codes.linegames.org HTTP/2.0” … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

Oh gawd. I can’t enable caching on my edge proxy everywhere 😱 Some shit™ doesn’t deal with a caching reverse proxy in front of it very well …
Oh gawd. I can’t enable caching on my edge proxy everywhere 😱 Some shit™ doesn’t deal with a caching reverse proxy in front of it very well for some reason I don’t have time to dig into right now 🤔 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

What’s a reasonable per second or per minute rate limit that I could apply in general at my edge proxy for all clients? (no matter what) … L …
What’s a reasonable per second or per minute rate limit that I could apply in general at my edge proxy for all clients? ( no matter what) … LIke a good reasonable upper bound? 🤔 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#qed3omq) @movq Yeah it’s starting to piss me off too 🤣 Not nearly as much as that guy, but stil. Anyway I’m having fun! Now I just need to …
@movq @www.uninformativ.de Yeah it’s starting to piss me off too 🤣 Not nearly as much as that guy, but stil. Anyway I’m having fun! Now I just need to find a good IP/Subnet list that I can blacklist entirely, ideally one that’s updated frequently so I can refresh firewall rules. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#7xqzija) i.e: Not much point in running a WAF on a static site. But OTOH if there’s enough abuse from shitty assholes, there might be 🤔🤔
i.e: Not much point in running a WAF on a static site. But OTOH if there’s enough abuse from shitty assholes, there might be 🤔🤔 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

**(#7xqzija) I’m just basically learning now how ModSecurity rules work and how to write my own.

The builtin OWASP rules are already working nice …**
I’m just basically learning now how ModSecurity rules work and how to write my own.

The builtin OWASP rules are already working nicely 👌 – And yeah I won’t include the WAF on every site block, probably just my main/primary domain where I tend to run demo services and other things. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#eebumiq) @bender@bender It’s true! 🤣 It’s a total garbage nonsense title. But the actual research paper that the video references is rea …
@bender It’s true! 🤣 It’s a total garbage nonsense title. But the actual research paper that the video references is real. Apple did in fact do a bunch of research and proved what we already know 🤣 – That is, AI is stupid 🤣 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

**(#eebumiq) But to be fair, we already knew this… I’ve observed it first hand, we knew it at the beginning. I’ll just leave you with this:

S …**
But to be fair, we already knew this… I’ve observed it first hand, we knew it at the beginning. I’ll just leave you with this:

Stochastic Parrot

or put simply:

Artificial Incompetence ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#fgaa2na) A pointer is basically a reference to a variable. It is typically used with structs and especially in pointer receiver methods so tha …
A pointer is basically a reference to a variable. It is typically used with structs and especially in pointer receiver methods so that you can modify fields of a struct. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#6cnegna) Also post as much as you want! It’s a free world. It’s your feed. It’s your daughter. 🤣 nobody actually has to read any of it let …
Also post as much as you want! It’s a free world. It’s your feed. It’s your daughter. 🤣 nobody actually has to read any of it let alone follow you if they don’t want to. 🙃 that’s kind of the beauty of a truly decentralized slow social media ecosystem. 😎 ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#gjl3gwq) @andros What do you mean by API? yarnd (which powers Yarn.social pods like twtxt.net) does have an API, however that API is desig …
@andros @twtxt.andros.dev What do you mean by API? yarnd ( which powers Yarn.social pods like twtxt.net) does have an API, however that API is designed for clients to interact with the pod and the user’s account and feed. e.g: there is a command-line client called yarnc and I used to maintain a mobile native app ( … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#vjwykla) @bender@bender Well technically now I can turn off ingress access to my infra on ports 80/43 etc and just rely on the outbound wir …
@bender Well technically now I can turn off ingress access to my infra on ports 80/43 etc and just rely on the outbound wireguard tunnelling for the ingress back in. ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#mgmtiha) @movq I was using Cloudflare primarily for 3 reasons: 1) For hosting DNS records 2) For reverse proxying into my infra’s services and …
@movq @www.uninformativ.de I was using Cloudflare primarily for 3 reasons: 1) For hosting DNS records 2) For reverse proxying into my infra’s services and 3) As a layer of defense against DDoS attacks or stupid misbehaving bots. I’m still using Cloudflare for 1) but 2/3 are now done entirely by something I’ve … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#7pqsr4q) @kat When I set about creating Yarn.social back in ~2020 I deliberately wanted to avoid things like reposts, likes and notifications. …
@kat @yarn.girlonthemoon.xyz When I set about creating Yarn.social back in ~2020 I deliberately wanted to avoid things like reposts, likes and notifications. I wanted to build something simple and non-distracting. I didn’t want to fall into the same traps of “big t … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

I am now proud to say, that as of this moment, I am off of Clownflare 🤣 Still using Cloudflare for DNS, but no longer proxying through their …
I am now proud to say, that as of this moment, I am off of Clownflare 🤣 Still using Cloudflare for DNS, but no longer proxying through their services or terminating TLS at their edge. Instead, all my sites and services now terminate TLS on my own edge proxy running Caddy+Wireguard ( so all ingress is actually egress 🤣) 🥳 #Clownflare [#Cloudflare]( … ⌘ Read more

⤋ Read More
prologic-twtxt-atom-feed
feeds.twtxt.net
 (20w ago)

(#ydommwa) @andros That’s kind of cool to hear! 👂 – Why HTML over Websockets though? I personally think the ideas behind Hypermedia Systems …
@andros @twtxt.andros.dev That’s kind of cool to hear! 👂 – Why HTML over Websockets though? I personally think the ideas behind Hypermedia Systems is great. Just a few extra controls and you nearly get everything you ever really needed or wanted. ⌘ Read more

⤋ Read More