diff --git a/etc/anubis/botPolicy.yaml b/etc/anubis/botPolicy.yaml index e7aa6c5..f117432 100644 --- a/etc/anubis/botPolicy.yaml +++ b/etc/anubis/botPolicy.yaml @@ -5,7 +5,6 @@ bots: AnubisTest action: DENY - # This allows local services on your server (change the public ip below) to bypass anubis - name: localhost action: ALLOW remote_addresses: @@ -13,16 +12,25 @@ bots: - 2a09:2dc0:0:100::1/64 - 192.42.0.0/16 - # Some stuff I allow - - name: custom-whitelist + - name: updown action: ALLOW - user_agent_regex: >- - yacybot|Lynx|Mastodon|OPR|Clipious + user_agent_regex: updown\.io + remote_addresses: ["45.32.107.181/32","45.32.74.41/32","91.121.222.175/32","104.238.159.87/32","178.63.21.176/32","135.181.102.135/32","102.212.60.78/32","45.76.104.117/32","104.238.136.194/32","45.63.29.207/32","192.99.37.47/32","2c0f:c40:4003:4::2/64","2001:41d0:2:85af::1/64","2001:19f0:9002:11a::1/64","2001:19f0:5801:1d8::1/64","2001:19f0:6c01:145::1/64","2607:5300:60:4c2f::1/64","2001:19f0:6001:2c6::1/64","2001:19f0:7001:45a::1/64","2001:19f0:4400:402e::1/64","2a01:4f8:141:441a::2/64","2a01:4f9:c010:d5f9::1/64"] - - name: uptime + - name: upkuma action: ALLOW - user_agent_regex: >- - updown.io|UptimeRobot + user_agent_regex: Uptime-Kuma + remote_addresses: ["91.196.213.24/32"] + + - name: farside + action: ALLOW + user_agent_regex: Farside + remote_addresses: ["82.217.68.206/32","2a01:4ff:f0:97a6::1/64"] + + - name: frontend-instances-scraper + action: ALLOW + user_agent_regex: frontend-instances-scraper + remote_addresses: ["172.182.196.51/32"] # Proactively deny all apps, scripts, etc where the devs didnt even properly change the default ua to something valid, so they can just fuck off imo - name: lazy-user-agents @@ -59,22 +67,33 @@ bots: - name: abusive-actors action: DENY user_agent_regex: >- - 01h4x\.com|360Spider|404checker|404enemy|80legs|ADmantX|AIBOT|ALittleClient|Alexa|Alexibot|AllSubmitter|Alligator|AlphaBot|Amazonbot|Anthill|Anthropic-ai|Anarchie|Anarchy|Anarchy99|Ankit|Apexoo|Aspiegel|Asterias|Atomseobot|Attach|AwarioBot|AwarioRssBot|AwarioSmartBot|BBBike|BDCbot|BDFetch|BLEXBot|BackDoorBot|BackStreet|BackWeb|Backlink-Ceck|BacklinkCrawler|Backlink-check|BacklinksExtendedBot|Badass|Bandit|Barkrowler|BatchFTP|BattleztarBazinga|BetaBot|Bigfoot|Bitacle|BlackHole|BlackWidow|Blackboard|Blow|BlowFish|Blazer|Boardreader|Bolt|BotALot|Brandprotect|Brandwatch|Buck|Buddy|BuiltBotTough|BuiltWith|Bullseye|BunnySlippers|BuzzSumo|Bytespider|BUbiNG|CATExplorador|CCBot|Chrome\ Privacy\ Preserving\ Prefetch\ Proxy|CODE87|CSHttp|Calculon|Cah\.io\.community|CazoodleBot|Cegbfeieh|Censys|censys\.io|ChatGPT-User|CheTeam|CheeseBot|CherryPicker|ChinaClaw|Chlooe|Citoid|Claritybot|Clark-crawler|Cliqzbot|Cloudmapping|Cocolyzebot|Coccocbot|Cognitiveseo|Coher-ai|Collector|Com\.plumanalytics|Copier|CopyRightCheck|Copyscape|Cosmos|Craftbot|Crawl\.sogou\.com|Crawler\.feedback|Crawler4j|CrawlingatHomeProject|CrazyWebCrawler|Crescent|CrunchBot|Curious|Custo|CyberFind|CyotekWebCopy|DBLBot|DIIbot|DataCha0s|Dataforseo\.com|Dataforseobot|DatabaseDriverMysqli|Demon|Demandbase-bot|Deusu|Devil|Digincore|DigitalPebble|Dirbuster|Disco|Discobot|Discoverybot|Dispatch|DittoSpyder|DnBCrawler-Analytics|DnyzBot|DomCopBot|DomainAppender|DomainCrawler|DomainSigmaCrawler|DomainStatsBot|DomainsProject|Dotbot|DownloadWonder|Dragonfly|Drip|Ecatch|ECCP/1\.0|EMailSiphon|EMailWolf|EasyDL|Ebingbong|Ecxi|EirGrabber|EroCrawler|Evil|Ev-crawler|Evc-batch|Exabot|Expanse|ExpressWebPictures|ExtLinksBot|Extractor|ExtractorPro|ExtremePictureFinder|EyeNetIE|Ezooms|FDM|FHscan|FacebookBot|facebookexternalhit|Facebookplatform|Facebookscraper|FemtosearchBot|Fimap|Firefox/7\.0|FlashGet|Flunky|Foobot|Freeuploader|FrontPage|Fuzz|FyberSpider|Fyrebot|G-i-g-a-b-o-t|GPTBot|GRFZbot|GT::WWW|GalaxyBot|GeedoProductSearch|Genieo|GermCrawler|GetRight|GetWeb|Getintent|Gigabot|Go!Zilla|Go-Ahead-Got-It|GoZilla|Gotit|GrabNet|Grabber|Grafula|GrapeFX|GrapeshotCrawler|GridBot|Gopher|Haansoft|HaosouSpider|Harvest|Havij|Heritrix|Hloader|HonoluluBot|Humanlinks|HybridBot|IDBTE4M|IDBot|IRLbot|Iblog|Id-search|IlseBot|ImageFetch|ImagesiftBot|Imagesift\.com|IndeedBot|IndyLibrary|InfoNaviRobot|InfoTekies|InformationSecurityTeamInfraSecScanner|InfraSecScanner|Instabid|Intelliseek|InterGET|InternetMeasurement|InternetNinja|InternetSeer|InternetVista\ monitor|Iria|Iskanie|Isitwp\.com|IstellaBot|Iubenda-radar|JOCWebSpider|JamesBOT|Jbrofuzz|JennyBot|JetCar|Jetty|JikeSpider|Joomla|Jorgee|JustView|Jyxobot|KenjinSpider|KeybotTranslation-Search-Machine|KeywordDensity|Kinza|Kozmosbot|LNSpiderguy|LWP::Simple|Lanshanbot|Larbin|Leap|LeechFTP|LeechGet|LexiBot|Lftp|LibWeb|Libwhisker|LieBaoFast|Lightspeedsystems|Likse|LinkedInBot|LinkScan|Linkdexbot|Linkfluence|LinkWalker|Linkbot|LinkextractorPro|LinkpadBot|LinksManager|LinqiaMetadataDownloaderBot|LinqiaRSSBot|LinqiaScrapeBot|Lipperhey|LipperheySpider|Litemage_walker|Lmspider|Ltx71|Mag-Net|Magnet|Mail\.RU_Bot|Majestic-SEO|Majestic12|MajesticSEO|Magpie-crawler|MarkMonitor|MarkWatch|MassDownloader|Masscan|MataHari|MauiBot|Mb2345Browser|MeanPathBot|Meanpathbot|Mediatoolkitbot|MegaIndex\.ru|Metauri|Mediawords|MicroMessenger|MicrosoftDataAccess|MicrosoftURLControl|Minefield|MisterPiX|MoblieSafari|Mojolicious|MolokaiBot|MorfeusFuckingScanner|Mozlila|Mr\.4x3|Msrabot|Muhstik-scan|Musobot|MOptimizer|NICErsPRO|NPbot|NameIntelligence|Nameprotect|Navroad|NearSite|Needle|Nessus|NetAnts|NetEstate\ NE\ Crawler|NetLyzer|NetMechanic|NetSpider|NetZIP|NetVampire|Netcraft|Nettrack|Netvibes|NextGenSearchBot|Nibbler|Niki-bot|Nikto|NimbleCrawler|Nimbostratus|Ninja|Nmap|Nuclei|Nutch|OBot|OfflineExplorer|OfflineNavigator|getodin|OMGili|OnCrawl|OpenAI|OpenAI\.com|OpenLinkProfiler|OpenVAS|Openfind|OrangeBot|OrangeSpider|OutclicksBot|OutfoxBot|PalmSource|Page\ Analyzer|PageGrabber|PageScorer|PageThing\.com|Pandalytics|Panscient|PapaFoto|Pavuk|PcBrowser|PeoplePal|Petalbot|Picscout|Picsearch|PictureFinder|Piepmatz|Pimonster|Pinterestbot|Pixray|PleaseCrawl|Pockey|Polaris\ version|Probe-image-size|ProPowerBot|ProWebWalker|Probethenet|Proximic|Psbot|Pu_iN|Pump|PxBroker|PyCurl|QueryNMetasearch|Quick-Crawler|Quora-Bot|Rainbot|RankActive|RankActiveLinkBot|RankFlex|RankingBot|RankingBot2|Rankivabot|RankurBot|Rere|ReGet|RealDownload|Reaper|RebelMouse|Recorder|RedesScrapy|RepoMonkey|Researchscan|Ripz|Ripper|RocketCrawler|Rogerbot|RSSingBot|S1z\.ru|SBIder|Scan\.lol|Scalaj-http|Seocompany\.store|Seoscanners|Seostar|Serpstatbot|Sexsearcher|SentiBot|SenutoBot|SeoCherryBot|SeoSiteCheckup|Seobility|SeobilityBot|Seomoz|Shodan|Siphon|Slack-ImgProxy|Slackbot|Slackbot-LinkExpanding|SlySearch|SmartDownload|Snake|Snapbot|Snoopy|SocialRankIOBot|Sociscraper|Sogouwebspider|Sogouspider|Sosospider|Sottopop|SpaceBison|Sp_auditbot|Spammen|SpankBot|Spanner|Spbot|Spider_Bot|Spider_Bot/3\.0|Spinn3r|SplitSignalBot|SputnikBot|Sqlmap|Sqlworm|Sqworm|Steeler|Stripper|Sucker|Sucuri|SummalyBot|SuperBot|SuperHTTP|Surfbot|SurdotlyBot|SurveyBot|Suzuran|Swiftbot|Szukacz|T0PHackTeam|T8Abot|TAkeOut|TelegramBot|Teleport|TeleportPro|Telesoft|Telesphoreo|Telesphorep|TheIntraformant|TheNomad|Thumbor|TightTwatBot|TinEye|TinyTestBot|Titan|Toata|Toweyabot|Tracemyfile|Trendiction|Trendictionbot|Trendiction\.com|Trendiction\.de|True_Robot|Turingos|Turnitin|TurnitinBot|TwengaBot|Twice|Twitterbot|Typhoeus|UBermetrics-technologies\.com|URLy\.Warning|URLyWarning|UnisterBot|Upflow|V-BOT|VBProject|VCI|Vacuum|Vagabondo|VelenPublicWebCrawler|VeriCiteCrawler|VidibleScraper|Virusdie|VoidEYE|Voil|Voltron|Voyagerx\.com|WASALive-Bot|WBSearchBot|WEBDAV|WISENutbot|WPScan|WWW-Collector-E|WWW-Mechanize|WWW::Mechanize|WWWOFFLE|Wallpapers|Wallpapers/3\.0|WallpapersHD|WeSEE|WebAuto|WebBandit|WebCollage|WebCopier|WebEnhancer|WebFetch|WebFuck|WebGains-bot|WebGoIS|WebImageCollector|WebLeacher|WebMeup-crawler|WebPix|WebPros\.com|WebProsbot|WebReaper|WebSauger|WebShag|WebStripper|WebSucker|WebVigil|WebWhacker|WebZIP|Webalta|WebmasterWorldForumBot|WebsiteExtractor|WebsiteQuester|Webster|Whack|Whacker|Whatweb|WhatsApp|Who\.isBot|Widow|WinHTTrack|WiseGuysRobot|Wonderbot|Woobot|Wotbox|Wprecon|X09Mozilla|X22Mozilla|XaldonWebSpider|Xaldon_WebSpider|Xenu|XPymep1\.exe|YaK|YoudaoBot|Zade|Zauba|Zauba\.io|Zermelo|Zeus|Zitebot|ZmEu|ZoomBot|ZoominfoBot|ZumBot|ZyBorg|zgrab|YandexAccessibilityBot|YandexCalendar|YandexDialogs|YandexDirect|YandexDirectDyn|YandexFavicons|YaDirectFetcher|YandexMobileBot|YandexMarket|YandexMetrika|YandexMobileScreenShotBot|YandexOntoDBAPI|YandexPartner|YandexRCA|YandexRenderResourcesBot|YandexSearchShop|YandexTracker|YandexUserproxy|YandexVideoParser|YandexScreenshotBot|YandexComBot|TikTok|Custom-AsyncHttpClient|Applebot|Aliyun|AliyunSecBot|Webmaster\.petalsearch|Seokicks|StepstoneCrawlBot|Keydrop\.io|fhms-its-research-scanner|meta-webindexer|Thinkbot + 01h4x\.com|360Spider|404checker|404enemy|80legs|ADmantX|AIBOT|ALittleClient|Alexa|Alexibot|AllSubmitter|Alligator|AlphaBot|Amazonbot|Anthill|Anthropic-ai|Anarchie|Anarchy|Anarchy99|Ankit|Apexoo|Aspiegel|Asterias|Atomseobot|Attach|AwarioBot|AwarioRssBot|AwarioSmartBot|BBBike|BDCbot|BDFetch|BLEXBot|BackDoorBot|BackStreet|BackWeb|Backlink-Ceck|BacklinkCrawler|Backlink-check|BacklinksExtendedBot|Badass|Bandit|Barkrowler|BatchFTP|BattleztarBazinga|BetaBot|Bigfoot|Bitacle|BlackHole|BlackWidow|Blackboard|Blow|BlowFish|Blazer|Boardreader|Bolt|BotALot|Brandprotect|Brandwatch|Buck|Buddy|BuiltBotTough|BuiltWith|Bullseye|BunnySlippers|BuzzSumo|Bytespider|BUbiNG|CATExplorador|CCBot|Chrome\ Privacy\ Preserving\ Prefetch\ Proxy|CODE87|CSHttp|Calculon|Cah\.io\.community|CazoodleBot|Cegbfeieh|Censys|censys\.io|ChatGPT-User|CheTeam|CheeseBot|CherryPicker|ChinaClaw|Chlooe|Citoid|Claritybot|Clark-crawler|Cliqzbot|Cloudmapping|Cocolyzebot|Coccocbot|Cognitiveseo|Coher-ai|Collector|Com\.plumanalytics|Copier|CopyRightCheck|Copyscape|Cosmos|Craftbot|Crawl\.sogou\.com|Crawler\.feedback|Crawler4j|CrawlingatHomeProject|CrazyWebCrawler|Crescent|CrunchBot|Curious|Custo|CyberFind|CyotekWebCopy|DBLBot|DIIbot|DataCha0s|Dataforseo\.com|Dataforseobot|DatabaseDriverMysqli|Demon|Demandbase-bot|Deusu|Devil|Digincore|DigitalPebble|Dirbuster|Disco|Discobot|Discoverybot|Dispatch|DittoSpyder|DnBCrawler-Analytics|DnyzBot|DomCopBot|DomainAppender|DomainCrawler|DomainSigmaCrawler|DomainStatsBot|DomainsProject|Dotbot|DownloadWonder|Dragonfly|Drip|Ecatch|ECCP/1\.0|EMailSiphon|EMailWolf|EasyDL|Ebingbong|Ecxi|EirGrabber|EroCrawler|Evil|Ev-crawler|Evc-batch|Exabot|Expanse|ExpressWebPictures|ExtLinksBot|Extractor|ExtractorPro|ExtremePictureFinder|EyeNetIE|Ezooms|FDM|FHscan|FacebookBot|facebookexternalhit|Facebookplatform|Facebookscraper|FemtosearchBot|Fimap|Firefox/7\.0|FlashGet|Flunky|Foobot|Freeuploader|FrontPage|Fuzz|FyberSpider|Fyrebot|G-i-g-a-b-o-t|GPTBot|GRFZbot|GT::WWW|GalaxyBot|GeedoProductSearch|Genieo|GermCrawler|GetRight|GetWeb|Getintent|Gigabot|Go!Zilla|Go-Ahead-Got-It|GoZilla|Gotit|GrabNet|Grabber|Grafula|GrapeFX|GrapeshotCrawler|GridBot|Gopher|Haansoft|HaosouSpider|Harvest|Havij|Heritrix|Hloader|HonoluluBot|Humanlinks|HybridBot|IDBTE4M|IDBot|IRLbot|Iblog|Id-search|IlseBot|ImageFetch|ImagesiftBot|Imagesift\.com|IndeedBot|IndyLibrary|InfoNaviRobot|InfoTekies|InformationSecurityTeamInfraSecScanner|InfraSecScanner|Instabid|Intelliseek|InterGET|InternetMeasurement|InternetNinja|InternetSeer|InternetVista\ monitor|Iria|Iskanie|Isitwp\.com|IstellaBot|Iubenda-radar|JOCWebSpider|JamesBOT|Jbrofuzz|JennyBot|JetCar|Jetty|JikeSpider|Joomla|Jorgee|JustView|Jyxobot|KenjinSpider|KeybotTranslation-Search-Machine|KeywordDensity|Kinza|Kozmosbot|LNSpiderguy|LWP::Simple|Lanshanbot|Larbin|Leap|LeechFTP|LeechGet|LexiBot|Lftp|LibWeb|Libwhisker|LieBaoFast|Lightspeedsystems|Likse|LinkedInBot|LinkScan|Linkdexbot|Linkfluence|LinkWalker|Linkbot|LinkextractorPro|LinkpadBot|LinksManager|LinqiaMetadataDownloaderBot|LinqiaRSSBot|LinqiaScrapeBot|Lipperhey|LipperheySpider|Litemage_walker|Lmspider|Ltx71|Mag-Net|Magnet|Mail\.RU_Bot|Majestic-SEO|Majestic12|MajesticSEO|Magpie-crawler|MarkMonitor|MarkWatch|MassDownloader|Masscan|MataHari|MauiBot|Mb2345Browser|MeanPathBot|Meanpathbot|Mediatoolkitbot|MegaIndex\.ru|Metauri|Mediawords|MicroMessenger|MicrosoftDataAccess|MicrosoftURLControl|Minefield|MisterPiX|MoblieSafari|Mojolicious|MolokaiBot|MorfeusFuckingScanner|Mozlila|Mr\.4x3|Msrabot|Muhstik-scan|Musobot|MOptimizer|NICErsPRO|NPbot|NameIntelligence|Nameprotect|Navroad|NearSite|Needle|Nessus|NetAnts|NetEstate\ NE\ Crawler|NetLyzer|NetMechanic|NetSpider|NetZIP|NetVampire|Netcraft|Nettrack|Netvibes|NextGenSearchBot|Nibbler|Niki-bot|Nikto|NimbleCrawler|Nimbostratus|Ninja|Nmap|Nuclei|Nutch|OBot|OfflineExplorer|OfflineNavigator|getodin|OMGili|OnCrawl|OpenAI|OpenAI\.com|OpenLinkProfiler|OpenVAS|Openfind|OrangeBot|OrangeSpider|OutclicksBot|OutfoxBot|PalmSource|Page\ Analyzer|PageGrabber|PageScorer|PageThing\.com|Pandalytics|Panscient|PapaFoto|Pavuk|PcBrowser|PeoplePal|Petalbot|Picscout|Picsearch|PictureFinder|Piepmatz|Pimonster|Pinterestbot|Pixray|PleaseCrawl|Pockey|Polaris\ version|Probe-image-size|ProPowerBot|ProWebWalker|Probethenet|Proximic|Psbot|Pu_iN|Pump|PxBroker|PyCurl|QueryNMetasearch|Quick-Crawler|Quora-Bot|Rainbot|RankActive|RankActiveLinkBot|RankFlex|RankingBot|RankingBot2|Rankivabot|RankurBot|Rere|ReGet|RealDownload|Reaper|RebelMouse|Recorder|RedesScrapy|RepoMonkey|Researchscan|Ripz|Ripper|RocketCrawler|Rogerbot|RSSingBot|S1z\.ru|SBIder|Scan\.lol|Scalaj-http|Seocompany\.store|Seoscanners|Seostar|Serpstatbot|Sexsearcher|SentiBot|SenutoBot|SeoCherryBot|SeoSiteCheckup|Seobility|SeobilityBot|Seomoz|Shodan|Siphon|Slack-ImgProxy|Slackbot|Slackbot-LinkExpanding|SlySearch|SmartDownload|Snake|Snapbot|Snoopy|SocialRankIOBot|Sociscraper|Sogouwebspider|Sogouspider|Sosospider|Sottopop|SpaceBison|Sp_auditbot|Spammen|SpankBot|Spanner|Spbot|Spider_Bot|Spider_Bot/3\.0|Spinn3r|SplitSignalBot|SputnikBot|Sqlmap|Sqlworm|Sqworm|Steeler|Stripper|Sucker|Sucuri|SummalyBot|SuperBot|SuperHTTP|Surfbot|SurdotlyBot|SurveyBot|Suzuran|Swiftbot|Szukacz|T0PHackTeam|T8Abot|TAkeOut|TelegramBot|Teleport|TeleportPro|Telesoft|Telesphoreo|Telesphorep|TheIntraformant|TheNomad|Thumbor|TightTwatBot|TinEye|TinyTestBot|Titan|Toata|Toweyabot|Tracemyfile|Trendiction|Trendictionbot|Trendiction\.com|Trendiction\.de|True_Robot|Turingos|Turnitin|TurnitinBot|TwengaBot|Twice|Twitterbot|Typhoeus|UBermetrics-technologies\.com|URLy\.Warning|URLyWarning|UnisterBot|Upflow|V-BOT|VBProject|VCI|Vacuum|Vagabondo|VelenPublicWebCrawler|VeriCiteCrawler|VidibleScraper|Virusdie|VoidEYE|Voil|Voltron|Voyagerx\.com|WASALive-Bot|WBSearchBot|WEBDAV|WISENutbot|WPScan|WWW-Collector-E|WWW-Mechanize|WWW::Mechanize|WWWOFFLE|Wallpapers|Wallpapers/3\.0|WallpapersHD|WeSEE|WebAuto|WebBandit|WebCollage|WebCopier|WebEnhancer|WebFetch|WebFuck|WebGains-bot|WebGoIS|WebImageCollector|WebLeacher|WebMeup-crawler|WebPix|WebPros\.com|WebProsbot|WebReaper|WebSauger|WebShag|WebStripper|WebSucker|WebVigil|WebWhacker|WebZIP|Webalta|WebmasterWorldForumBot|WebsiteExtractor|WebsiteQuester|Webster|Whack|Whacker|Whatweb|WhatsApp|Who\.isBot|Widow|WinHTTrack|WiseGuysRobot|Wonderbot|Woobot|Wotbox|Wprecon|X09Mozilla|X22Mozilla|XaldonWebSpider|Xaldon_WebSpider|Xenu|XPymep1\.exe|YaK|YoudaoBot|Zade|Zauba|Zauba\.io|Zermelo|Zeus|Zitebot|ZmEu|ZoomBot|ZoominfoBot|ZumBot|ZyBorg|zgrab|YandexAccessibilityBot|YandexCalendar|YandexDialogs|YandexDirect|YandexDirectDyn|YandexFavicons|YaDirectFetcher|YandexMobileBot|YandexMarket|YandexMetrika|YandexMobileScreenShotBot|YandexOntoDBAPI|YandexPartner|YandexRCA|YandexRenderResourcesBot|YandexSearchShop|YandexTracker|YandexUserproxy|YandexVideoParser|YandexScreenshotBot|YandexComBot|TikTok|Custom-AsyncHttpClient|Applebot|Aliyun|AliyunSecBoti|Webmaster\.petalsearch|Seokicks|StepstoneCrawlBot|Keydrop\.io|fhms-its-research-scanner|meta-webindexer|Thinkbot|NetworkingExtension|com.apple.WebKit.Networking + + # Catch all known webbrowsers + - name: modern-browser + user_agent_regex: >- + Chrome|Firefox|Safari|Opera|OPR|Edg|Edge + action: CHALLENGE + challenge: + algorithm: preact + difficulty: 4 + report_as: 4 + # Catch all generic browsers - name: generic-browser user_agent_regex: >- - Mozilla|Opera - action: WEIGH - weight: - adjust: 10 - - # Catch the rest - #- name: catch-all - # expression: "true" - # action: WEIGH - # weight: - # adjust: 5 + ^Mozilla + action: CHALLENGE + challenge: + algorithm: fast + difficulty: 5 + report_as: 5 + + # Deny the rest + - name: catch-all + expression: "true" + action: DENY dnsbl: false @@ -84,75 +103,8 @@ openGraph: store: backend: valkey parameters: - url: "unix://default:REDACTED@/data/redis-server.sock" - #backend: bbolt - #parameters: - # path: /data/db/anubis.bdb + url: "unix://default:REDACTED/data/redis-server.sock" -# By default, send HTTP 200 back to clients that either get issued a challenge -# or a denial. This seems weird, but this is load-bearing due to the fact that -# the most aggressive scraper bots seem to really, really, want an HTTP 200 and -# will stop sending requests once they get it. status_codes: CHALLENGE: 200 DENY: 403 - -# The weight thresholds for when to trigger individual challenges. Any -# CHALLENGE will take precedence over this. -# -# A threshold has four configuration options: -# -# - name: the name that is reported down the stack and used for metrics -# - expression: A CEL expression with the request weight in the variable -# weight -# - action: the Anubis action to apply, similar to in a bot policy -# - challenge: which challenge to send to the user, similar to in a bot policy -# -# See https://anubis.techaro.lol/docs/admin/configuration/thresholds for more -# information. -thresholds: - - name: zero - expression: weight <= 0 - action: ALLOW - - - name: mild - expression: - all: - - weight > 0 - - weight < 10 - action: CHALLENGE - challenge: - algorithm: preact - difficulty: 3 - report_as: 3 - - - name: moderate - expression: - all: - - weight >= 10 - - weight < 20 - action: CHALLENGE - challenge: - algorithm: preact - difficulty: 4 - report_as: 4 - - - name: high - expression: - all: - - weight >= 20 - - weight < 30 - action: CHALLENGE - challenge: - algorithm: fast - difficulty: 5 - report_as: 5 - - # Whoever ends up here needs to fucking choke on an impossible challenge - - name: impossible - expression: weight >= 30 - action: CHALLENGE - challenge: - algorithm: fast - difficulty: 16 - report_as: 4