limit queries

[fanchyna]

limit the number of queries per ip per day, default is 3, configurable in web.xml, effective immediately (no need to restart tomcat).
files added:

• queryexceeded.html
• SimpleQueryLimitFilter.java
  files updated:
• web.xml

[madian9]

What's the current value? 3 per day sounds low to me
On Jul 7, 2014, at 12:27 PM, Jian Wu wrote:

limit the number of queries per ip per day, default is 3, configurable in web.xml, effective immediately (no need to restart tomcat).
files added:

queryexceeded.html
SimpleQueryLimitFilter.java files updated:
web.xml
You can merge this Pull Request by running

git pull https://github.com/SeerLabs/CiteSeerX limit_request
Or view, comment on, or merge it at:

#13

Commit Summary

add solrlogo
File Changes

A web/citeseerx_webapp/images/solrlogo1.png (0)
Patch Links:

https://github.com/SeerLabs/CiteSeerX/pull/13.patch
https://github.com/SeerLabs/CiteSeerX/pull/13.diff
—
Reply to this email directly or view it on GitHub.

[fanchyna]

3 is the default, the web.xml can override it. I would match the download limit, so 2000.

[kylemarkwilliams]

Agreed, 3 seems low as a default. Also, it seems like some files are missing from the commit (I only see the logo?)

[madian9]

Let's set default to 100 at least
On Jul 7, 2014, at 12:35 PM, Kyle Williams wrote:

Agreed, 3 seems low as a default. Also, it seems like some files are missing from the commit (I only see the logo?)

—
Reply to this email directly or view it on GitHub.

[fanchyna]

I forgot to run the commit command. Now you should see the files. 2000 is set in web.xml

[cleegiles]

How easy is this to change? We may need to reduce 2000.
On 7/7/14 1:40 PM, Jian Wu wrote:

I forgot to run the commit command. Now you should see the files. 2000 is set in web.xml

---

Reply to this email directly or view it on GitHub:
#13 (comment)

[fanchyna]

it is not implemented yet, i choose 2000 just to match the download limit. how about 1000?

[cleegiles]

Probably more reasonable.

Why did the attacks stop over the weekend? What happened?

On 7/7/14 3:01 PM, Jian Wu wrote:

it is not implemented yet, i choose 2000 just to match the download limit. how about 1000?

---

Reply to this email directly or view it on GitHub:
#13 (comment)

[fanchyna]

I am writing a new method to my tomcat_log_analyzer to separate the queries. This will tell us more about the attack.

[kylemarkwilliams]

Can you update this to 2014. Also, other comments that refer to downloads should refer to queries

[fanchyna]

fullfilled

[fanchyna]

I've changed the variable naming and tested it on the staging machine. The limit specified in web.xml is changed to 1000 per day. I've submitted the updated version. Thanks.

[kylemarkwilliams]

Besides my last comment on whether stopping the same query is really necessary, I think this is ready to merge.

[fanchyna]

I think the original designer was thinking of cases when some users or bots automatically send the same queries too fast and cause some "query spikes". Anyway, I will go with you this time.

[fanchyna]

I've commented out the block to check ipaddr+request. New code is tested on csxstaging01.