2026-01-23 02:52 UTC
@stephen Good point. I updated the article to include an approach that in exclusive instead of inclusive for cases like this where you want to assume agents are ok by default, which would be more feed-reader friendly.
Replies (1)
-
@stephen@microbe.vital.org.nz 2026-01-23 05:54
@markmcb@mas.to I do something very similar to what you do, a bit more complicated. Anyone requesting .php or a number of other paths gets a 403 and firewalled via fail2ban, no matter what the HTTP version (I don't have WP or any PHP on my site, no one should be asking for /admin, etc etc etc). And then for HTTP 1.x I allow requests for atom.xml and rss.xml; allow a list of bots I approve of; serve 418 to the rest, with a little teapot emoji as the body.