diff --git a/dev-tools/globalblacklist-testing.template b/dev-tools/globalblacklist-testing.template index d6355a407..2dd020adb 100644 --- a/dev-tools/globalblacklist-testing.template +++ b/dev-tools/globalblacklist-testing.template @@ -18967,18 +18967,28 @@ geo $ratelimited { # ============================================ # -------------------------------------------- -# 1. MAP BAD BOTS TO OUR RATE LIMITER FUNCTION +# 4.1. MAP BAD BOTS TO OUR RATE LIMITER FUNCTION # -------------------------------------------- - map $bad_bot $bot_iplimit { - 0 ""; - 1 ""; - 2 $binary_remote_addr; - 4 $binary_remote_addr; - } + map $bad_bot $bot_iplimit { + 0 ""; + 1 ""; + 2 $binary_remote_addr; + 4 ""; + } +# -------------------------------------------------- +# 4.2. MAP BAD BOTS TO OUR SUPER RATE LIMITER FUNCTION +# -------------------------------------------------- + + map $bad_bot $bot_iplimit2 { + 0 ""; + 1 ""; + 2 ""; + 4 $binary_remote_addr; + } # -------------------------- -# 2. SET RATE LIMITING ZONES +# 4.3. SET RATE LIMITING ZONES # -------------------------- # BAD BOT RATE LIMITING ZONE @@ -18990,8 +19000,9 @@ geo $ratelimited { # BAD BOT SUPER RATE LIMITING ZONE # Super Rate limiting will only take effect if on any User-Agents with a value of 4 - limit_conn_zone $bot_iplimit zone=bot4_connlimit:16m; - limit_req_zone $bot_iplimit zone=bot4_reqlimitip:16m rate=1r/m; + limit_conn_zone $bot_iplimit2 zone=bot4_connlimit:16m; + limit_req_zone $bot_iplimit2 zone=bot4_reqlimitip:16m rate=1r/m; + # ========================================== # END SECTION 4 - ACTIVATE BLOCKER FUNCTIONS