Would affectionately calling the #iocaine community "The Tarpit" be okay, I wonder...
Yes
No
I'm facepalming so hard rn
Poll ends at .
I did end up upping #iocaine's IP ban expiration from 8h to 12h.

#iocaine 3.4.0 has been released into the wild! As usual, pre-built static binaries, OCI images, Debian packages, and Nix derivations are already built & available.

If you were using the firewall feature introduced in 3.3, this release changes how the firewall is configured, and how it works. Sorry!

But it's for a good reason! This iteration of the firewall scales much better past 40k blocked IPs, and is easier to work with on the scripting side too.

Other than a reworked firewall, there aren't any interesting changes in this release - which I hope will be the last release in the 3.x series. Work on 4.0 already began.

Cookie monster!

Okay, lets get this #iocaine 3.4.0 release done.
I've propped up my #iocaine setup back into place. Now I need to figure out how to better integrate it with #Yunohost. I'd need to have basically all the web traffic pass though iocaine (or #Anubis or any other web filter), ideally without having to setup another VPS as proxy in front.

I woke up with head full of #iocaine ideas. Some of which would solve some old wishes, like "how to stream responses from the script?", some would make the script API a whole lot simpler (no more decide()/output() split! and HAProxy stuff would still work fine!).

Tonight was a productive night. Thanks, @doctor!

In other news, while I planned to release #iocaine 3.4.0 on April 11, that'll be a 3.4.0-rc.2 release instead. I have new firewall tricks to try, and these things take time to properly test.

@lemgandi I just send them into iocaine's poisonous maze (https://iocaine.madhouse-project.org/) together with all the other bots and AI crawlers. This way I can also poison their crawl-queues with more poisoned-URL's, so they have to eat gigabytes of randomly generated garbage

#iocaine

iocaine - the deadliest poison known to AI

Ooh. Roto likely doesn't work on OpenBSD due to W^X. That makes sense, should have thought of that immediately!

Now to figure out how to disable that for #iocaine.

He atinado con la solución a lo de iocaine: la versión en debian es muy antigua, actualizándola a la última ya funciona.

#iocaine #debian #caddy