shieldlist-unblock-abuse Gratuit

The public unblock page refusing one address repeatedly — rate limit hit, captcha failed — an automated visitor, not a blocked person

Catégorie

panel

Seuil

10/10m

Politique de ban

web

Parseurs

shieldlist-unblock-refused

Pourquoi elle est écrite ainsi

Le fichier de la règle Voir le brut

# An address hammering the public unblock page — refused by its rate
# limit or failing its captcha again and again. The page is meant for a
# person in a hurry; a script gets the door.
rule: shieldlist-unblock-abuse
description: "The public unblock page refusing one address repeatedly — rate limit hit, captcha failed — an automated visitor, not a blocked person"
about:
  purpose: >-
    Keep a script from hammering the public unblock page, which is meant for a person in a hurry.
  blocks: >-
    Ten refusals in ten minutes — the page's own rate limit, or a captcha failed again and again.
  applies_to: >-
    The machine that serves the public unblock page.
  requires:
    - >-
      The controller's own log, declared as `log: shieldlist`.
    - >-
      The public page turned on.
  beware:
    - >-
      Someone banned by this rule cannot reach the page to unban themselves. That is the intent for a script; for a person it is a dead end, so keep the threshold generous.
category: panel
parsers:
  - shieldlist-unblock-refused
# levels are the machine's now — strict halves these numbers, lenient doubles them, instant is the first hit; this rule declared strict: 5/10m; lenient: 20/10m
threshold: 10/10m
ban: web