<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Shaarli app crashing constantly due to indexing bots (Yandex &amp; co)]]></title><description><![CDATA[<p dir="auto">My Shaarli app on Cloudron has been crashing for the past hour, but it seems I'm unable to make use of iptables in the container nor configure apache rules to block those bots.<br />
I've of course blocked the user-agent via the Security config of Shaarli but it does not seem enough.<br />
How to mitigate this? I can't use Shaarli because of that or only for a couple seconds after restarting it. My Shaarli is a small instance.<br />
Workarounds exist <a href="https://sublimecoding.com/blocking-bots-in-apache-using-htaccess/" target="_blank" rel="noopener noreferrer nofollow ugc">https://sublimecoding.com/blocking-bots-in-apache-using-htaccess/</a> or <a href="https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker/blob/master/Apache_2.4/README.md" target="_blank" rel="noopener noreferrer nofollow ugc">https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker/blob/master/Apache_2.4/README.md</a> but require access to the configuration (apache/.htaccess...).</p>
<p dir="auto">Any idea? For now it's Shaarli, tomorrow it could be another web app on my instance, and I'm unsure to want to maintain my own block list and risk blocking myself by accident, even if that seem to be a viable solution? <a href="https://docs.cloudron.io/networking/#blocklist" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/networking/#blocklist</a></p>
<p dir="auto">How do you mitigate this kind of spam?</p>
]]></description><link>https://forum.cloudron.io/topic/13233/shaarli-app-crashing-constantly-due-to-indexing-bots-yandex-co</link><generator>RSS for Node</generator><lastBuildDate>Wed, 13 May 2026 03:16:15 GMT</lastBuildDate><atom:link href="https://forum.cloudron.io/topic/13233.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 03 Feb 2025 23:46:28 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Shaarli app crashing constantly due to indexing bots (Yandex &amp; co) on Wed, 05 Feb 2025 08:56:10 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/sansguidon" aria-label="Profile: SansGuidon">@<bdi>SansGuidon</bdi></a> I guess I should have completely reread your initial post before dropping the link <img src="https://forum.cloudron.io/assets/plugins/nodebb-plugin-emoji/emoji/android/1f605.png?v=fed68e33a46" class="not-responsive emoji emoji-android emoji--sweat_smile" style="height:23px;width:auto;vertical-align:middle" title=":sweat_smile:" alt="😅" /></p>
]]></description><link>https://forum.cloudron.io/post/101204</link><guid isPermaLink="true">https://forum.cloudron.io/post/101204</guid><dc:creator><![CDATA[fbartels]]></dc:creator><pubDate>Wed, 05 Feb 2025 08:56:10 GMT</pubDate></item><item><title><![CDATA[Reply to Shaarli app crashing constantly due to indexing bots (Yandex &amp; co) on Tue, 04 Feb 2025 18:02:40 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/fbartels" aria-label="Profile: fbartels">@<bdi>fbartels</bdi></a> in that case that's good as it's the option I've already tried as mentioned at the end of original post. It took me a while to find about it's existence though because it's the first time I had to face such an spam on my instance, usually blocking user agents was enough <img src="https://forum.cloudron.io/assets/plugins/nodebb-plugin-emoji/emoji/android/1f61c.png?v=fed68e33a46" class="not-responsive emoji emoji-android emoji--stuck_out_tongue_winking_eye" style="height:23px;width:auto;vertical-align:middle" title="😜" alt="😜" /></p>
]]></description><link>https://forum.cloudron.io/post/101191</link><guid isPermaLink="true">https://forum.cloudron.io/post/101191</guid><dc:creator><![CDATA[SansGuidon]]></dc:creator><pubDate>Tue, 04 Feb 2025 18:02:40 GMT</pubDate></item><item><title><![CDATA[Reply to Shaarli app crashing constantly due to indexing bots (Yandex &amp; co) on Tue, 04 Feb 2025 17:25:51 GMT]]></title><description><![CDATA[<p dir="auto">Maybe he meant <a href="https://docs.cloudron.io/networking/#blocklist" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/networking/#blocklist</a> instead</p>
]]></description><link>https://forum.cloudron.io/post/101189</link><guid isPermaLink="true">https://forum.cloudron.io/post/101189</guid><dc:creator><![CDATA[fbartels]]></dc:creator><pubDate>Tue, 04 Feb 2025 17:25:51 GMT</pubDate></item><item><title><![CDATA[Reply to Shaarli app crashing constantly due to indexing bots (Yandex &amp; co) on Tue, 04 Feb 2025 17:15:26 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/joseph" aria-label="Profile: joseph">@<bdi>joseph</bdi></a> thanks! how to make use of the linked change for my shaarli instance? I'm not fully grasping how they relate.</p>
<p dir="auto">Regarding CF I'd prefer to avoid them, I'll never give them credit nor let their bloated modern firewall interfer with my stuff. They already ruin the web enough. So I prefer blocking by IP I guess.... <img src="https://forum.cloudron.io/assets/plugins/nodebb-plugin-emoji/emoji/android/1f914.png?v=fed68e33a46" class="not-responsive emoji emoji-android emoji--thinking_face" style="height:23px;width:auto;vertical-align:middle" title="🤔" alt="🤔" /><img src="https://forum.cloudron.io/assets/plugins/nodebb-plugin-emoji/emoji/android/1f64f.png?v=fed68e33a46" class="not-responsive emoji emoji-android emoji--pray" style="height:23px;width:auto;vertical-align:middle" title="🙏" alt="🙏" /><img src="https://forum.cloudron.io/assets/plugins/nodebb-plugin-emoji/emoji/android/1f3fc.png?v=fed68e33a46" class="not-responsive emoji emoji-android emoji--skin-tone-3" style="height:23px;width:auto;vertical-align:middle" title="🏼" alt="🏼" /></p>
]]></description><link>https://forum.cloudron.io/post/101187</link><guid isPermaLink="true">https://forum.cloudron.io/post/101187</guid><dc:creator><![CDATA[SansGuidon]]></dc:creator><pubDate>Tue, 04 Feb 2025 17:15:26 GMT</pubDate></item><item><title><![CDATA[Reply to Shaarli app crashing constantly due to indexing bots (Yandex &amp; co) on Thu, 06 Feb 2025 17:34:45 GMT]]></title><description><![CDATA[<p dir="auto">If the bots are from fixed known IPs , then just block them using <a href="https://docs.cloudron.io/networking/#blocklist" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/networking/#blocklist</a></p>
<p dir="auto">If the bots are all over, then this is like a DDoS. You will need to use some service like cloudflare to counteract this.</p>
<p dir="auto">edit: fixed link</p>
]]></description><link>https://forum.cloudron.io/post/101180</link><guid isPermaLink="true">https://forum.cloudron.io/post/101180</guid><dc:creator><![CDATA[joseph]]></dc:creator><pubDate>Thu, 06 Feb 2025 17:34:45 GMT</pubDate></item></channel></rss>