吃枣药丸

吃枣药丸

HomeArchives

iptables rules: How to only allow browsers with the Chromium engine to access your website.

#浏览器指纹98
AI Translation
This post is translated from Chinese into English through AI.View Original
AI-generated summary
I shared two iptables rules on X, targeting only HTTPS sites using Chromium's BoringSSL ClientHello GREASE fingerprint to combat web scraping. Additionally, the Random module in iptables can be used to randomly drop or reset ClientHello packets.

I shared two iptables rules on X:

iptables -A INPUT -p tcp -m bpf --bytecode '54,48 0 0 0,84 0 0 240,21 0 50 64,48 0 0 9,21 0 48 6,40 0 0 6,69 46 0 8191,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,12 0 0 0,7 0 0 0,80 0 0 0,21 0 38 22,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 5,12 0 0 0,7 0 0 0,80 0 0 0,21 0 29 1,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 9,12 0 0 0,7 0 0 0,80 0 0 0,21 0 20 3,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 1,12 0 0 0,7 0 0 0,80 0 0 0,21 0 11 3,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 78,12 0 0 0,7 0 0 0,80 0 0 0,84 0 0 15,21 1 0 10,6 0 0 65535,6 0 0 0' -j REJECT --reject-with tcp-reset
iptables -A INPUT -p tcp -m bpf --bytecode '55,48 0 0 0,84 0 0 240,21 0 51 64,48 0 0 9,21 0 49 6,40 0 0 6,69 47 0 8191,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 6,12 0 0 0,7 0 0 0,80 0 0 0,21 0 38 22,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 11,12 0 0 0,7 0 0 0,80 0 0 0,21 0 29 1,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0 4,4 0 0 15,12 0 0 0,7 0 0 0,80 0 0 0,21 0 20 3,177 0 0 0,80 0 0 12,52 0 0 16,36 0 0
Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.