PacketFence
Bug Tracking System
Main | My View | View Issues | Change Log | Roadmap
  

View Issue Details [ Jump to Notes ] [ Issue History ] [ Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0000790PacketFencepublic2009-08-31 17:492011-01-26 15:43
Reporterobilodeau 
Assigned Toobilodeau 
PrioritynormalSeverityminorReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0000790: block popular non-human UserAgents
DescriptionSince 1.8.4 packetfence edit a node with the useragent each time the portal is hit. This allow to enforce browser restriction policies and also device banning policies.

But, sometimes a lot of noise is generated by non-human initiated connection (software updates, stuff phoning home, etc.). This is increasing the server's load (pfcmd fork) and replacing the node's browser with something else that is not really relevant.

I think the best approach to circumvent this problem is to redirect known non-human useragents to an access denied page.

http://httpd.apache.org/docs/2.2/misc/rewriteguide.html#access [^]
TagsNo tags attached.
fixed in git revision
fixed in mtn revision
Attached Files

- Relationships

-  Notes
(0001303)
obilodeau (reporter)
2009-08-31 18:39

 I added the following lines in conf/templates/httpd.conf.apache22 and conf/templates/httpd.conf.pre_apache22 at the top of rewriting rules:

  # Some UserAgents we don't want to mess with
  RewriteCond %{HTTP_USER_AGENT} ^Microsoft-CryptoAPI.* [OR]
  RewriteCond %{HTTP_USER_AGENT} ^Windows-Update-Agent.*
  RewriteRule ^.*$ - [L,forbidden]
(0001304)
obilodeau (reporter)
2009-08-31 18:39

 Tested in lab and it seems to do it.
(0001305)
obilodeau (reporter)
2009-09-01 11:48

 added WinHttp-Autoproxy-Service after some research
  # Some UserAgents we don't want to mess with
  RewriteCond %{HTTP_USER_AGENT} ^Microsoft-CryptoAPI.* [OR]
  RewriteCond %{HTTP_USER_AGENT} ^Windows-Update-Agent.* [OR]
  RewriteCond %{HTTP_USER_AGENT} ^WinHttp-Autoproxy-Service.*
  RewriteRule ^.*$ - [L,forbidden]
(0001312)
obilodeau (reporter)
2009-09-11 18:18

 Fixed in mtn revision 208766cb0490cd539ee723a2a8889202903613c2

- Issue History
Date Modified Username Field Change
2009-08-31 17:49 obilodeau New Issue
2009-08-31 17:49 obilodeau Status new => assigned
2009-08-31 17:49 obilodeau Assigned To => obilodeau
2009-08-31 18:39 obilodeau Note Added: 0001303
2009-08-31 18:39 obilodeau Note Added: 0001304
2009-09-01 11:48 obilodeau Note Added: 0001305
2009-09-11 18:18 obilodeau Note Added: 0001312
2009-09-11 18:18 obilodeau Status assigned => resolved
2009-09-11 18:18 obilodeau Resolution open => fixed
2011-01-26 15:43 obilodeau Status resolved => closed

Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker